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EXECUTIVE  SUMMARY 


5.1.  INTRODUCTION 

5.1.1.  Background 

Under  the  direction  of  the  U.S.  Army  Office  of  the  Program  Execu¬ 
tive  Officer-Program  Manager  for  Chemical  Demilitarization  (PEO-PM  Cml 
Demll),  GA  Technologies  Inc.  (GA)  and  Its  subcontractors  performed  a 
con^rehenslve  assessment  of  the  frequency  and  magnitude  of  accidental 
agent  releases  associated  with  various  alternatives  under  consideration 
for  the  Chemical  Stockpile  Disposal  Program  (CSDP).  This  assessment  was 
carried  out  In  support  of  the  environmental  Impact  statement  (EIS)  for 
this  program  and  addresses  only  the  stockpile  of  chemical  munitions  that 
Is  currently  stored  at  eight  sites  In  the  continental  United  States 
(CONUS).  The  assessment  of  potential  health  consequences  to  the  public 
resulting  from  accidental  releases  calculated  In  this  study  will  be 
performed  In  a  separate  study.  These  consequences  and  the  GA-evaluated 
frequencies  of  the  releases  leading  to  these  consequences  will  form  the 
basis  of  estimates  of  the  potential  public  "risks"  associated  with  the 
CSDP  alternatives. 


The  alternatives  Investigated  in  this  study  are  as  follows: 

1.  Disposal  of  the  agents  and  munitions  at  the  eight  existing 
storage  sites. 

2.  Collocation  (transportation)  and  disposal  of  the  munitions  at 
two  regional  sites. 
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3.  Collocation  and  disposal  of  the  munitions  at  a  single  national 
site. 


4.  Partial  collocation  of  the  selected  stockpiles  from  Aberdeen 
Proving  Ground  (APG)  to  Johnston  Island  by  water  or  to  Tooele 
Army  Depot  (TEAO)  by  air  and  from  the  Lexlngton-Blue  Grass 
Army  Depot  (LBAD)  to  TEAD  by  air. 

5.  Continued  storage  of  the  munitions  at  the  existing  storage 
sites. 

This  report  addresses  the  onsite  disposal  alternative  listed  above 
(l.e..  Item  1).  The  other  alternatives  are  discussed  In  separate 
reports. 

Demilitarization  of  the  chemical  agent  and  munition  stockpiles 
requires  the  construction  of  facilities  and  planned  activities  to  store, 
handle,  and  transport  onsite  the  chemical  materiel;  to  transport  the 

agents  and  munitions;  to  destroy  the  munitions;  and  to  decommission  the 

disposal  facilities.  This  report  addresses  each  of  these  activities, 
other  than  facility  construction  and  closure,  which  do  not  pose  risk  to 

the  health  and  safety  of  the  general  public  from  agent  release. 

S.1.2.  Study  Objectives  and  Deliverables 

The  primary  objectives  of  the  study  reported  In  this  document  were 

to: 

1.  Identify  events  that  could  Initiate  the  release  of  agent  to 
the  environment  (l.e..  Initiating  events). 

2.  Develop  the  various  sequences  of  events  resulting  from  these 
Initiators  and  leading  to  accidental  agent  release. 
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3.  Perform  a  quantitative  analysis  of  the  frequency  of  occurrence 
of  each  relevant  accident  sequence. 

4.  Characterize  the  physical  state,  quantity,  and  duration  of 
agent  released  from  each  accident  sequence. 

These  objectives  were  accoBq>llshed  by  developing  a  list  of  poten¬ 
tial  accident  sequences  for  each  major  activity,  estimating  the  frequen¬ 
cies  of  these  sequences,  and  calculating  the  magnitudes  of  released 
agent  associated  with  these  sequences.  It  should  be  noted  that  only 
accident  sequences  that  survived  a  conservative  screening  process,  con¬ 
sidering  both  frequency  and  magnitude  of  agent  release,  are  Included  In 
the  deliverables  of  this  project. 

5.1.3.  Scope  of  Study 

The  scope  of  effort  reported  In  this  document,  as  noted  earlier, 
did  not  Include  the  evaluation  of  agent  dispersion  to  the  environment 
and  the  consequences  to  the  public  resulting  from  such  releases.  As 
such,  the  title  of  this  report  Is  more  appropriately  that  of  a  probabi¬ 
listic  "release”  analysis  as  opposed  to  a  probabilistic  "risk"  analysis, 
since  risk  Is  usually  defined  as  the  product  of  frequency  and  conse¬ 
quence.  Therefore,  the  term  "risk,”  as  used  In  this  study,  refers  to 
the  frequency  of  accidental  agent  release  and  not  to  the  frequency  of 
the  agent  release  consequence  to  public  health. 

5.1.4.  Plant  Description 

Demilitarization  of  the  chemical  munitions  stored  at  U.S.  sites 
Is  based  on  the  Johnston  Atoll  Chemical  Agent  Disposal  System  (JACADS) 
technology.  This  facility  Is  currently  being  constructed  on  the 
Johnston  Atoll  In  the  Pacific  Ocean.  The  demilitarization  facility 
consists  of  an  Integrated  munitions  handling  system  that  can  process  a 
variety  of  munitions  types  and  agents.  After  disassembly  and  draining 


of  the  munitions t  the  agent t  explosive  materials,  dunnage,  and  metal 
mass  are  subjected  to  different  combustion  trains  where  the  combustibles 
are  consumed  by  Incineration.  All  materials  are  subjected  to  two-stage 
Incineration,  and  combustion  products  are  released  to  the  environment 
through  a  state-of-the-art  pollution  abatement  system. 

Two  types  of  demilitarization  plants  will  be  constructed:  mixed- 
munition  plants  and  bulk  agent  plants.  Mixed-munition  plants  are  capa¬ 
ble  of  processing  all  types  of  chemical  materiel.  Bulk  plants  are 
designed  to  process  ton  containers,  bombs,  and  spray  tanks. 

To  meet  the  September  1994  deadline  for  the  destruction  of  the 
chemical  agent  stockpile,  the  plants  are  projected  to  begin  operation 
during  the  period  between  September  1990  and  March  1991.  The  plants 
will  operate  five  days  per  week  and  twenty-four  hours  per  day. 

The  analysis  of  plant  operations  presented  In  this  assessment  was 
based  on  a  plant  design  which  was  approximately  35  percent  con^lete.  It 
Is  recognized  that  design  evolution  could  have  an  Intact  on  the  results 
reported  herein. 

S.l.S.  Site  Descriptions 


There  are  eight  sites  In  the  CONUS  where  chemical  munitions  are 
currently  being  stored.  These  sites  are:  Tooele  Arniy  Depot  (TEAD) , 
Anniston  Army  Depot  (ANAD),  Aberdeen  Proving  Ground  (APG),  Lexington- 
Blue  Grass  Army  Depot  (LBAD) ,  Newport  Army  Ammunition  Plant  (NAAP),  Pine 
Bluff  Arsenal  (PBA),  Pueblo  Depot  Activity  (PUDA),  and  the  Umatilla 
Depot  Activity  (UMDA) . 


TEAD  Is  located  in  north  central  Utah.  A  prototype  demilitariza¬ 
tion  plant,  the  Chemical  Agent  Munitions  Disposal  System  (CAMDS)  facil¬ 
ity,  is  located  at  this  site.  The  site  currently  stores  a  wide  variety 
of  chemical  munitions  and  bulk  agent  containers  of  mustard  and  the  nerve 
agents,  GB  and  VX. 

ANAD  is  located  in  northeast  Alabama.  The  chemical  munitions 
stockpile  at  ANAD  consists  of  all  chemical  munitions  types  except  for 
bombs,  spray  tanks,  and  8-in.  projectiles  filled  with  VX. 

APG  is  located  in  Maryland  near  the  head  of  the  Chesapeake  Bay. 

APG  is  conq>rlsed  of  two  general  areas,  the  Aberdeen  area  and  the 
Edgewood  area  where  the  chemical  munition  storage  facilities  are 
located.  Only  mustard-filled  ton  containers  are  stored  at  APG. 

LBAD  is  located  south  of  Richmond,  Kentucky.  The  chemical  munition 
stockpile  at  LBAD  consists  of  8-ln.  projectiles,  155-mm  projectiles,  and 
MSS  rockets. 

NAAF  is  located  west  of  Indianapolis,  Indiana.  The  chemical  muni¬ 
tions  stockpile  is  stored  there  in  a  single  warehouse  and  consists  of 
containers  of  VX. 

FBA  is  located  southeast  of  Little  Rock,  Arkansas.  The  stockpile 
at  PBA  consists  of  MSS  rockets,  land  mines,  ton  containers,  and  some 
A. 2-in.  mortar  projectiles. 

UMDA  is  located  in  northeastern  Oregon.  The  stockpile  at  UMDA 
consists  of  lS5-mm  and  8-in.  projectiles,  MSS  rockets,  M23  land  mines, 
bombs,  spray  tanks,  and  ton  containers. 


S.2.  STUDY  APPROACH 

The  risk  analysis  presented  in  this  report  combines  the  structured 
safety  analysis  detailed  in  MIL-STD-882B  (Ref.  S-1)  and  the  probabilis¬ 
tic  approach  outlined  in  NUREG/CR-2300  (Ref.  S-2).  The  first  reference 
requires  that  hazards  analyses  be  performed  to  assess  the  risk  involved 
during  the  planned  life  expectancy  of  a  system.  It  also  provides  guid¬ 
ance  on  the  categorization  of  hazard  severity  and  of  probability  as  a 
means  of  identifying  which  hazards  should  be  eliminated  or  reduced  to  an 
acceptable  level.  The  second  reference  serves  as  a  guidebook  for  the 
risk  assessment  of  nuclear  power  plants. 

Risk  assessment  can  be  defined  as  the  quantification  of  an  undesir¬ 
able  effect  in  probabilistic  terms.  Relative  to  the  health  and  safety 
of  the  public,  the  effects  of  interest  are  injuries  and  deaths.  Risk 
assessment  has  been  utilized  in  various  Industries  for  some  time. 
Insurance  companies  have  long  used  actuarial  data  for  statistical  eva¬ 
luations  to  justify  differences  in  the  insurance  premium  paid  by  persons 
in  different  "risk"  categories.  The  risk  assessments  performed  for 
nuclear  power  plants,  on  the  other  hand,  arc  examples  of  major  industry 
efforts  to  quantify  risks  of  low-frequency  events  for  which  no  good 
actuarial  data  exist.  The  nuclear  power  plant  risk  assessments  have 
become  models  for  other  Industrial  risk  assessments. 

S.2.1.  Risk  Assessment  Methodology 

Probabilistic  risk  assessment  (PRA)  is  a  systematic,  disciplined 
approach  to  quantifying  the  frequency  and  consequences  of  events  which 
can  occur  at  random  points  in  time.  In  its  application  to  the  various 
chemical  munition  disposal  alternatives  currently  under  consideration, 
PRA  provides  a  comprehensive  framework  for  estimating  and  understanding 
the  risks  associated  with  the  storage,  handling,  transportation,  and 
demilitarization  activities  associated  with  these  alternatives.  By 
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applying  this  methodology  to  each  alternative  In  a  consistent  and  uni¬ 
form  manner,  a  statement  of  the  relative  risk  of  these  alternatives  can 
be  made.  Because  of  the  significant  uncertainties  In  the  data  used  to 
quantify  the  frequency  of  occurrence  of  various  accident  sequences  and 
the  magnitudes  of  the  associated  agent  releases,  extreme  caution  must  be 
used  \dien  addressing  the  absolute  risk  associated  with  each  disposal 
option. 

In  simplistic  terms,  the  PRA  process  focuses  on  answering  the  fol¬ 
lowing  three  basic  questions: 

1.  What  can  go  wrong? 

2.  How  frequently  Is  It  expected  to  happen? 

3.  What  would  be  the  associated  consequences? 

The  remainder  of  this  summary  describes  how  these  questions  are 
addressed  In  the  risk  assessment  of  the  chemical  materiel  disposal  pro¬ 
gram.  In  this  study,  the  estimation  of  consequences  Is  limited  to  the 
magnitudes  of  agent  release  for  each  sequence. 

S.2.1.1.  Identification  of  Initiating  Events.  The  first  step  in  a  pro¬ 
babilistic  risk  assessment  Is  the  Identification  of  Initiating  events 
which,  by  themselves  or  In  combination  with  additional  failures,  can 
lead  to  the  release  of  agent  to  the  environment.  Initiating  events  are 
Identified  for  each  of  the  demilitarization  activities.  Such  events 
generally  fall  into  two  broad  categories  known  as  "Internal"  events  and 
"external"  events.  Internal  events  originate  within  the  activity  and 
are  caused  by  human  error  or  random  equipment  failure.  Examples  of  such 
events  are  the  dropping  or  puncture  of  munitions  during  handling  opera¬ 
tions,  and  the  random  failure  of  a  normally  operating  piece  of  equipment 
In  the  demilitarization  process  line.  The  class  of  events  referred  to 
as  external  Includes  aircraft  crashes  and  natural  phenomena  such  as 
earthquakes  and  storms.  In  the  context  of  a  risk  assessment,  events 
such  as  Internal  flooding  and  fires  are  also  considered  to  be  external 
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events.  External  events  are  usually  pervasive  in  nature  in  that  they 
are  assumed  to  fail  redundant  equipment  that  is  provided  for  safe  shut¬ 
down  of  the  operation  and  containment  of  the  agent. 

5.2.1.2.  Accident  Sequence  Development.  Once  Initiating  events  are 
Identified,  logic  models  (such  as  event  trees  and  sequence  level  fault 
trees)  are  developed  to  display  the  various  paths  that  the  accident  can 
take.  For  example,  an  initiating  event  such  as  spurious  shutdown  of  an 
incinerator  will  not  result  in  a  significant  release  of  agent  to  the 
environment  unless  numerous  ventilation  and  automatic  shutdown  systems 
fall.  In  most  cases,  the  probability  of  failure  of  multiple  systems  is 
so  low  that  the  frequencies  of  such  accident  sequences  are  too  low  to  be 
of  any  concern.  Furthermore,  because  of  Inherent  system  inertia  and 
engineered  safety  features  which  are  provided,  there  may  be  ample  time 
to  recover  and  repair  mitigating*  systems  prior  to  any  release. 

As  suggested  above,  operator  Intervention  can  influence  the  course 
of  an  accident,  and  therefore  his  role  must  be  included  in  the  logic 
models  where  appropriate.  Of  course,  operating  and  emergency  personnel 
also  have  a  significant  influence  on  the  potential  for  and  amount  of 
accidental  agent  release. 

5.2.1.3.  Human  Interactions.  Human  interactions,  or  Interventions,  of 
Interest  to  the  chemical  munitions  disposal  risk  assessment  fall  into 
one  of  the  following  six  general  categories: 

1.  Initiation  of  an  accident  by  committing  an  error  (e.g.,  a 

munitions  handler  punctures  or  accidentally  drops  a  munition) . 


"Mitigation"  as  used  in  this  report  is  the  act  of  preventing  or 
limiting  the  consequence  of  an  accident  that  has  occurred. 


p 


m 


m 


.  I  •»l 


2. 


Test  and  maintenance  actions  (e.g.,  a  valve  Is  disabled  or 
left  In  the  wrong  configuration  following  a  test  or  mainte¬ 
nance  act ) . 


3.  Termination  of  an  accident  by  correctly  Implementing  estab¬ 
lished  emergency  procedures  (e.g.,  an  operator  terminates 
agent  feed  to  the  liquid  Incinerator  when  automatic  termina¬ 
tion  has  failed). 

A.  Aggravation  of  an  accident  by  taking  Incorrect  action  (e.g., 
a  plant  operator  misdiagnoses  the  nature  of  the  accident  and 
performs  an  act  which  causes  the  accident  to  have  greater 
consequences) . 

5.  Termination  of  an  accident  by  actions  vdilch  are  outside  the 
scope  of  existing  procedures  (e.g.,  based  on  his  knowledge  of 
the  plant  or  process,  a  plant  operator  performs  an  act  which 
Is  not  covered  by  procedures  and  terminates  or  mitigates  the 
accident) . 

6.  Intentional  acts  to  Initiate  accidents  or  render  equipment  In 
a  failed  state  (sabotage). 


Human  Interactions  that  fall  In  the  first  three  categories  are 
modeled  either  as  a  separate  event  heading  In  the  event  tree  or  as  an 
Independent  event  In  the  fault  tree  which  Is  used  to  model  and  quantify 
the  event  In  the  event  tree.  Human  Interactions  defined  by  categories  A 
and  5  above  are  difficult  to  quantify  and  as  such  are  not  given  much 
attention  In  a  risk  assessment. 

Acts  of  sabotage  (category  6)  are  outside  the  scope  of  this  analy¬ 
sis  and  will  be  addressed  elsewhere. 


S.2.I.A.  Agent  Raleas*  CharactTlzatlon.  The  consequences  o£  an  agent- 
release  event  are  dependent  on  the  type  of  agent,  the  magnitude  of  the 
release,  the  mode  and  duration  of  the  release,  the  dispersion  of  the 
agent  to  the  environment,  the  demographic  characteristics  of  the  region 
Isqjacted  by  the  release,  and  the  toxicity  of  the  dispersed  agent  at  the 
concentration  levels  to  which  members  of  the  public  are  exposed.  The 
scope  of  effort  reported  In  this  document  Is  limited  to  the  first  three 
characteristics  listed  above.  Agent  dispersion  to  the  environment  and 
subsequent  effects  on  humans  arc  addressed  elsewhere  In  a  separate 
report. 

The  characterization  of  agent  release  required  a  systematic  review 
of  the  potential  modes  of  agent  release  from  Its  normal  confinement. 

The  first  result  of  this  review  was  the  separation  of  the  accident  sce¬ 
narios  Into  two  categories t  (1)  scenarios  that  occur  while  the  agent  Is 
contained  In  the  munition;  and  (2)  scenarios  that  occur  after  the  agent 
Is  separated  from  the  munition.  For  the  munition-dependent  accident 
scenarios,  the  agent  release  mechanism  Is  dependent  on  the  particular 
mechanical,  thermal,  and  explosive  behavior  of  the  munition,  assuming 
the  occurrence  of  an  Initiating  event  such  as  dropping  during  handling 
or  aircraft  crash,  as  well  as  the  confinement  which  Is  provided.  If  any. 
Scenarios  Included  In  the  second  group  are  limited  to  those  which  occur 
during  the  actual  demilitarization  process  (l.e.,  plant  operations). 

After  determining  that  agent  could  be  released  In  a  particular 
accident  sequence  and  that  the  frequency  of  that  sequence  exceeded  the 
threshold  screening  frequency,  an  analysis  was  performed  to  Identify  the 
possible  paths  by  which  the  agent  could  be  released  to  the  environment 
and  to  estimate  the  quantity  of  agent  released. 

S.2.1.5.  Sequence  Screening.  The  Inqplementatlon  of  PRA  methodology  In 
terms  of  event  trees  can  produce  a  large  number  of  potential  accident 
sequences.  In  order  to  reduce  this  to  a  manageable  number  to  focus  on 
the  critical  scenarios  for  analysis,  the  accident  sequences  are  screened 
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for  frequency  or  consequence.  By  using  conservative  values  for  the 
conditional  probabilities  of  event  tree  branches,  It  Is  possible  to  show 
that  many  of  the  possible  sequences  are  of  sufficiently  low  frequency 
(e.g.,  less  than  10~^^  per  year)  that  they  need  not  be  addressed 
further.  In  addition,  If  an  accident  sequence  has  a  frequency  greater 
than  the  threshold  screening  frequency  but  results  In  an  Insignificant 
release  of  agent*  to  the  environment.  It  can  also  be  eliminated  from 
further  consideration.  The  accident  sequences  contained  In  this  report 
have  been  subjected  to  both  types  of  screening. 

S.3.  RESULTS 

The  analysis  of  the  potential  for  agent  release  to  the  atmosphere 
from  accident  scenarios  related  to  the  onsite  disposal  option  Included 
the  following  major  activities:  (1)  storage,  (2)  handling  activities 
associated  with  the  transport  of  munitions,  (3)  onsite  transportation, 
and  (4)  plant  operations  associated  with  the  demilitarization  of 
munitions.  This  section  discusses  some  of  the  accident  probability  and 
agent  release  results  associated  with  these  activities. 

The  results  of  the  analysis  of  the  various  activities  encon^asslng 
the  onsite  disposal  option  cannot  be  presented  In  the  same  units,  l.e., 
annual  frequencies,  because  of  the  possible  dlvulgence  of  classified 
Information.  This  Is  only  possible  for  some  storage  and  plant  operation 
accident  scenarios.  For  accident  scenarios  related  to  the  handling 
activities  at  the  different  sites,  the  unclassified  portion  of  the 
probabilistic  analysis  Is  given  In  terms  of  frequency  of  accidents  per 
pallet  of  munitions  (or  as  a  container  of  munitions).  For  onsite 
transportation  accidents,  the  basic  results  are  reported  In  terms  of 

*Less  than  14  Ibm  of  mustard;  less  than  0.4  Ibm  of  agent  VX;  and 
less  than  0.3  Ibm  of  agent  GB.  These  quantities  represent  the  minimum 
quantities  of  agent  release  that  would  result  In  a  lethal  dose  of  agent 
at  500  m  for  the  most  limiting  release  modes  (Ref.  S-3). 


accident  frequency  per  vehicle  mile.  These  probabilities /unit  are  then 
multiplied  by  the  number  of  handling  operations  or  vehicle  miles 
traveled  during  the  stockpile  disposal  program. 

The  evaluation  of  the  actual  risk  to  the  public  and  environment 
requires  agent  dispersion  calculations  which  are  not  in  the  scope  of  the 
study  reported  here.  Despite  this  limitation,  the  results  discussed 
herein  still  provide  useful  insights  on  the  contributions  of  the  various 
disposal  activities  to  the  risk  of  an  agent  release.  These  insights  are 
discussed  below. 

5.3.1.  Accident  Scenarios  During  Storage 

5.3.1.1.  Internal  Events.  There  were  no  significant  internal  event 
initiators  of  accidents  during  storage  at  the  disposal  site  before  move¬ 
ment  to  the  demilitarization  facility.  Per  unit  operation,  forklift 
drop  accidents  occur  more  frequently  than  forklift  tine  punctures. 

Also,  the  use  of  a  lifting  beam  instead  of  a  tine  leads  to  an  order  of 
magnitude  decrease  in  drop  frequency. 

5.3.1.2.  External  Events.  These  events  involve  accidents  caused  by 
natural  phenomena  or  human  activity  affecting  munitions  in  storage 
igloos,  open  storage  areas,  holding  areas,  or  warehouses.  If  these  are 
assumed  to  be  full  of  munitions,  the  agent  inventories  range  up  to  100, 
1000,  and  2000  tons,  respectively,  for  storage  igloos,  open  areas,  and 
warehouses.  The  most  frequent  external  accidents  having  significant 
release  involve  mild  intensity  earthquakes  or  small  airplane  crashes 
(order  depending  on  site).  Amounts  of  available  agent  inventories 
released  in  these  events  are  on  the  order  of  fractions  of  one  percent  or 
less  (munition  punctures,  drops,  etc.). 

The  largest  releases  occur  for  a  large  aircraft  crash,  a  meteorite 
strike,  or  a  severe  earthquake,  especially  when  a  warehouse  (at  NAAP, 
TEAD,  or  UMDA)  is  involved.  These  can  result  in  up  to  10  percent  of 
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the  agent  Inventory  released  for  scenarios  Involving  a  fire  vdilch  has 
the  potential  (duration)  for  destroying  the  entire  Inventory  of  an  Igloo 
or  warehouse.  The  munitions  stored  In  warehouses  contain  only  VX  or 
mustard  vrfilch  have  much  slower  evaporation  rates  than  GB  and  hence  are 
not  easily  dispersed  Into  the  atmosphere.  Thus,  warehouse  scenarios 
Involving  only  spills  are  not  significant  risk  contributors.  The  ware¬ 
house  at  UMDA  has  the  potential  for  the  largest  release.  Meteorite 
Strike-Initiated  sequence  median  frequencies  are  one  to  two  orders  of 
magnitude  lower  than  the  aircraft  crash-induced  sequence  frequencies. 

As  expected,  munitions  stored  outdoors  are  generally  more  susceptible  to 
large  aircraft  crashes  than  those  stored  In  warehouses  or  Igloos,  but 
releases  are  lower.  Both  APG  and  PBA  have  ton  containers  stored  out¬ 
doors,  and  the  aircraft  crash  probabilities  at  these  sites  are  somewhat 
higher  than  at  the  other  sites.  Igloos  appear  to  provide  only  minimal 
protection  from  direct  crashes  of  large  planes,  but  releases  are  an 
order  of  magnitude  lower.  The  releases  are  more  severe  If  burstered 
munitions  are  Involved. 

S.3.2.  Accident  Scenarios  During  Handling 

Included  In  the  handling  analysis  are  (1)  single  munition  or  pallet 
movements  by  hand,  forklift,  or  other  equipment;  (2)  packing  or 
unpacking  pallets  Into  transportation  containers;  and  (3)  loading  and 
unloading  packages  from  trucks. 

The  results  Indicate  that  dropped  munitions,  whether  In  palletized 
form  or  not,  occur  more  frequently  than  either  forklift  tine  puncture  or 
forklift  collision  accidents.  In  fact,  the  frequency  of  forklift  colli¬ 
sion  accidents  which  lead  to  the  munitions  falling  off  the  forklift  Is 
an  order  of  magnitude  lower  than  the  drop  accidents.  Furthermore,  the 
type  of  clothing  an  operator  Is  wearing  while  handling  these  munitions 
Influence  the  drop  frequency  value.  An  operator  wearing  Level  A  cloth¬ 
ing  Is  more  likely  to  commit  an  error  that  would  cause  the  munition  to 
be  dropped  than  when  he  is  wearing  more  comfortable  clothing. 


The  results  also  indicate  that  spray  tanks  (In  overpacks)  have 
relatively  higher  drop  frequencies  than  other  munitions.  This  Is 
largely  due  to  the  assumption  that  spray  tanks  will  be  lifted  and  moved 
to  the  truck  (for  loading  or  unloading)  using  forklift  with  tines.  The 
drop  frequency  using  the  tines  Is  an  order  of  magnitude  higher  than  with 
the  use  of  lifting  beams. 

For  bare  munitions,  the  rockets  seem  to  be  the  most  prone  to  punc¬ 
tures  from  drops  or  forklift  tine  accidents.  However,  the  onsite 
transport  container  (ONC)  Itself  also  affects  the  puncture  probability. 
However,  bare  munitions  have  higher  puncture  probabilities  than  muni¬ 
tions  In  ONCs.  This  observation  Is  of  course  not  quite  evident  In  the 
final  results  presented  because  there  are  more  handling  operations 
involving  possible  drops  of  ONCs  than  bare  munitions. 

Bulk  Items  that  are  punctured  lead  to  larger  releases  than  other 
munitions  such  as  projectiles  or  rockets.  Bombs  are  of  concern  because 
they  contain  GB  which  evaporates  more  readily  than  the  other  agent 
types.  The  agent  vapor  releases  range  up  to  170  lb  (thermal  failure  of 
all  munitions  In  an  ONC),  or  up  to  10  percent  of  the  available  agent 
Inventory. 

Within  the  types  of  handling  accidents,  the  events  designated  as 
HO,  idilch  are  related  to  the  packaging  of  munitions  In  ONCs  and  their 
movement  from  storage  (sending  sites)  to  the  munitions  handling  Igloo 
(MHI),  predominate  over  handling  accidents  related  to  the  facility  (HF). 
This  Is  largely  because  (1)  there  are  more  handling  operations  Involved 
In  the  HO  accidents,  (2)  HF  accidents  generally  Involve  munitions  In 
ONCs,  which  provides  them  with  some  protection  from  puncture,  and  (3)  HF 
accidents  Involving  bare  munitions  occur  Inside  the  munitions  demilita¬ 
rization  building  (MDB)  which  Is  designed  for  vapor  containment;  hence. 
Including  the  probability  of  a  detonation  which  destroys  the  vapor  con¬ 
tainment  barrier,  both  the  frequency  of  a  release  and  the  release  Itself 
are  relatively  lower. 
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The  frequency  results  for  the  handling  accidents  could  not  be  com¬ 
pared  with  the  accidents  from  other  activities,  such  as  plant  opera¬ 
tions,  because  of  differences  In  units.  To  get  some  perspective  on  how 
they  coiiq>are  on  a  yearly  basis,  we  can  estimate  the  number  of  pallets 
that  could  be  handled  based  on  the  plant  annual  processing  rates.  For 
Illustrative  purposes  we  calculate  the  number  of  bomb  pallets  that  are 
required  to  meet  the  annual  plant  processing  rate  as: 

5.4  bombs/h  x  24  h/day  x  5  day/week 
X  52  week/yr  /2  bombs/pallet  »  16,848  pallets/yr  . 

By  multiplying  the  HCl  sequence  frequency  for  TEAD  (1.2  x  10"^/ 
pallet)  with  the  number  of  pallets/yr,  the  annual  frequency  Is  2.0  x 
10~^/yr.  Thus,  handling  accidents  which  lead  to  significant  agent 
releases  (In  particular,  agent  GB)  are  dominant  risk  contributors 
because  of  the  relatively  higher  annual  frequency  values.  Of  course 
depending  on  the  actual  munition  Inventory,  the  value  of  annual  fre¬ 
quency  may  either  Increase  or  decrease  when  converted  to  the  more 
meaningful  per  stockpile  basis. 

S.3.3.  Accident  Scenarios  During  Plant  Operations 

Included  In  the  analysis  for  this  phase  are  all  malfunctions  dur¬ 
ing  agent  processlng/lnclneratlon  x^lthln  the  KDB  or  external  events 
affecting  drained  and  undralned  agent  In  the  MDB,  Including  those  In 
the  unpack  area  (UFA)  (up  to  10^  lb  of  agent  available)  and  munitions 
awaiting  processing  In  the  MHI,  up  to  3  x  10^  lb  of  agent  available. 
After  unpacking,  the  munitions  are  processed  by  conveyor  to  the  burster 
removal  area,  mine  punch-and-draln  area,  projectile  mortars  disassembly 
area,  rocket  and  burster  shearing  machines,  mine  machine  for  burster 
removal,  a  bulk  Item  drain  station,  a  toxic  cubicle  (TOX)  agent  storage 
tank,  furnaces  for  explosive  deactivation,  metal  parts  decontamination, 
and  agent  and  dunnage  Incinerators,  as  appropriate. 
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5.3.3.1.  Internal  Events.  Because  of  the  engineered  safety  features 
provided  in  the  plant  design,  both  the  frequency  of  release  and  magni¬ 
tude  of  release  associated  with  accidents  initiated  by  equipment  failure 
and  human  error  are  relatively  small.  Among  the  large  number  of  acci¬ 
dent  scenarios  analyzed,  the  highest  frequency  scenario  (P052)  is  initi¬ 
ated  by  an  Inadvertent  feed  of  an  unpunched  burstered  munition  to  the 
dunnage  incinerator  (10“2/yr  for  mines;  5  x  lO'^/yr  for  other  muni¬ 
tions).  As  a  result  of  detonation,  one  burstered  munition  Inventory  is 
released  to  the  atmosphere  as  vapor  (only  up  to  15  lb  of  agent). 

The  largest  amount  of  agent  vapor  release  occurs  for  a  metal  parts 
furnace  explosion  (P04A)  with  ventilation  failure  (one  bulk  item  inven¬ 
tory  release,  up  to  1700  lb).  However,  this  scenario  was  assessed  to 
have  a  very  low  frequency,  around  10~^®/yr.  Another  event  with  up  to 
several  hundred  pounds  of  vapor  release  is  P0A8,  munition  detonation  in 
the  explosive  containment  room  vestibule  with  subsequent  fire  spreading 
to  unpacked  munitions.  However,  this  scenario  also  has  a  low  frequency, 
around  10"^/yr. 

5.3.3.2.  External  Events.  Aircraft  crashes  dominate  the  external  event 
frequency,  and  there  is  little  difference  between  direct  and  Indirect 
crashes.  The  small  difference  is  attributed  to  offsetting  effects. 
Although  the  indirect  crash  has  smaller  conditional  probabilities  of 
failures  than  the  direct  crash,  the  risk  model  utilizes  a  larger  target 
area  for  the  indirect  crash.  There  is  very  little  distinction  in  the 
frequency  of  aircraft  crashes  with  or  without  fire,  since  historical 
data  indicate  that  there  is  roughly  a  50  percent  chance  that  the  crash 
of  an  aircraft  will  Involve  a  fire.  The  frequency  of  a  crash  onto  the 
MDB  is  considerably  larger  than  that  for  the  MHI  because  the  surface 
area  of  the  MDB  is  more  than  30  times  larger  than  the  MHI. 


The  frequency  of  large  aircraft  crashes  is  estimated  to  be  higher 
at  ANAD  than  it  is  for  TEAD.  This  impacts  the  regional  versus  national 
collocation  option.  The  accident  scenario  involving  the  crash  of  an 
airplane  onto  the  outdoor  agent  piping  system  for  the  modified  CAMDS 
facility  at  TEAD  has  a  frequency  of  about  10"®/yr  with  up  to  55  lb  of 
vapor  release.  This  scenario  Includes  both  large  and  small  aircraft 
crashes.  The  frequency  of  small  aircraft  (including  helicopters) 
crashes  is  at  least  two  orders  of  magnitude  higher  than  the  frequency  of 
large  aircraft  crashes  at  TEAD. 

The  frequencies  of  earthquake- Induced  accident  scenarios  are 
generally  higher  for  TEAD  than  for  ANAD  since  TEAD  is  located  in  a 
region  more  prone  to  earthquakes.  Sequence  P033,  which  represents  an 
earthquake-initiated  munition  fall  and  fire  but  with  the  MDB  and  TOX 
intact,  has  the  highest  frequency  (2  x  10"^ /yr  for  ANAD  and  5  x  10“5/yr 
for  TEAD).  This  sequence  Involves  the  detonation  of  all  munitions  (if 
burstered)  in  the  UPA  since  the  fire  is  not  suppressed  in  this  sequence. 

All  accident  sequences  related  to  tornadoes  or  meteorites  were 
estimated  to  occur  at  frequencies  of  less  than  10“^®/yr  and  thus  were 
screened  out. 


S.3.A.  Accident  Scenarios  During  Transport 


S. 3.4.1.  Onsite  Transportation.  When  munitions  at  their  storage 
locations  are  ready  for  demilitarization,  they  are  transferred  into 
onsite  containers  and  then  moved  by  truck  to  the  MHI.  The  onsite 
transport  accidents  are  identified  as  VO  scenarios.  The  agent  available 
in  a  truck  carrying  (four)  ONCs  ranges  up  to  7000  lb. 
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As  a  result  of  analysis  for  both  Internally  Initiated  events  (human 
error  or  equipment  failure)  and  externally  Initiated  events,  the  follow¬ 
ing  conclusions  were  reached: 

1.  The  ONC  package  provides  a  substantial  protection  from  liiq>act 
and  crush  forces.  The  results  show  that  accident  frequencies 
resulting  In  Intact  or  crush  failure  are  Insignificant.  This 
Is  largely  due  to  the  administrative  control  to  be  liiq>osed 
during  truck  travel  idilch  limits  truck  speed  to  no  more  than 
20  iiq>h.  The  Intact  forces  at  this  velocity  are  not  sufficient 
to  breach  the  containment. 

2.  The  probability  of  puncture  resulting  from  truck  collision/ 
overturn  Is  the  most  lnq>ortant  mechanical  failure  mode. 

3.  Truck  accidents  which  generate  fires  are  not  likely  to  deto¬ 
nate  burstered  munitions  Inside  onsite  packages,  since  they 
provide  15-mln  protection  from  an  all-engulf Ing  fire.  These 
scenario  frequency  results  are  quite  low  because  of  the  admin¬ 
istrative  control  for  limiting  the  amount  of  fuel  In  the  truck 
so  as  not  to  exceed  a  lO-mln  fire. 

4.  For  tornado-lnltlated  accidents,  puncture  as  a  result  of  truck 
overturn  Is  the  dominant  contributor  to  the  sequence 
frequency. 

5.  Generation  of  undue  forces  during  truck  accidents  that  could 
cause  burster  detonations  has  a  small  contribution  to  the 
overall  truck  transportation  risk. 

6.  The  amount  of  agent  spilled  or  burned  during  truck  accidents 
resulting  In  the  breach  In  containment  by  puncture  forces 
generally  Involve  the  agent  content  of  one  munition.  Up  to 
10  percent  Is  released  as  vapor. 


7.  ONCs  can  fall  when  an  aircraft  crashes  Into  the  truck  (V06, 


V07).  The  entire  truckload  Is  involved,  and  up  to  10  percent 
is  released  as  a  vapor.  Hence,  aircraft  crash-initiated  truck 
accidents  have  the  most  severe  consequences.  It  should  be 
noted,  however,  that  none  of  the  accident  sequences  has  a 
frequency  greater  than  10~^/yr. 

S.4.  UNCERTAINTIES  IN  THE  ANALYSIS 

In  assessing  the  risks  associated  with  the  onsite  disposal  alter¬ 
native,  every  effort  was  made  to  perform  best-estimate  analyses,  i.e., 
"realistic"  evaluation  and  quantification  of  the  accident  sequence 
frequencies  and  associated  agent  releases.  The  use  of  pessimistic  or 
conservative  modeling  techniques  or  data  for  quantification  violates  the 
Intent  of  the  probabilistic  nature  of  the  study.  Realistic  modeling  and 
quantification  permits  a  balanced  evaluation  of  risk  contributors  and 
comparison  of  alternatives.  However,  for  realistic  or  best-estimate 
calculations,  the  obvious  concern  is  the  accuracy  of  the  results. 
Uncertainty  analysis  addresses  this  concern. 

S.4.1.  Sources  of  Uncertainty 

Since  the  event  sequences  discussed  in  Section  S.3  have  not 
actually  occurred,  it  is  difficult  to  establish  the  frequency  of  the 
sequence  and  associated  consequences  with  great  precision.  For  this 
reason,  many  parameters  in  a  risk  assessment  are  treated  as  probabilis¬ 
tically  distributed  parameters,  so  that  the  computation  of  sequence  fre¬ 
quencies  and  resulting  consequences  can  Involve  the  probabilistic  combi¬ 
nation  of  distributions. 

There  are  three  general  types  of  uncertainty  associated  with  the 
evaluations  reported  in  this  document:  (1)  modeling,  (2)  data,  and 
(3)  coiiq>leteness . 


There  exist  basic  uncertainties  regarding  the  ability  of  the  vari¬ 
ous  models  to  represent  the  actual  conditions  associated  with  the 
sequence  of  events  for  the  accident  scenarios  that  can  occur  In  the 
storage  and  disposal  activities.  The  ability  to  represent  actual  phe¬ 
nomena  with  analytical  models  Is  always  a  potential  concern.  The  use  of 
fundamental  models  such  as  fault  trees  and  event  trees  Is  sometimes  sim¬ 
plistic  because  most  events  depicted  In  these  models  are  treated  as 
leading  to  one  of  two  binary  states:  success  or  failure  (l.e.,  partial 
successes  or  failures  are  Ignored).  Model  uncertainties  are  difficult 
to  quantify  and  are  addressed  In  this  study  by  legitimate  efforts  of  the 
analysts  to  make  the  models  as  realistic  as  possible.  Where  such  real¬ 
ism  could  not  be  achieved,  conservative  approaches  were  taken. 

No  uncertainty  from  oversights,  errors,  or  omission  from  the  models 
used  (e.g.,  event  trees  and  fault  trees)  Is  Included  In  the  uncertainty 
analysis  results.  Including  these  uncertainties  Is  beyond  the  state-of- 
the-art  of  present  day  uncertainty  analysis. 

The  uncertainties  In  the  assignment  of  event  probabilities  (e.g., 
component  failure  rates  and  Initiating  event  frequencies)  are  of  two 
types:  Intrinsic  variability  and  lack  of  knowledge.  An  example  of 

Intrinsic  variability  Is  that  where  the  available  experience  data  Is  for 
a  population  of  similar  components  In  similar  environments,  but  not  all 
the  components  exhibit  the  same  reliability.  Intrinsic  variations  can 
be  caused,  for  example,  by  different  manufacturers,  maintenance  prac¬ 
tices,  or  operating  conditions.  A  second  example  of  Intrinsic  variabil¬ 
ity  Is  that  related  to  the  effects  of  long-term  storage  on  the  condition 
of  the  munitions  as  compared  to  their  original  configuration.  Lack  of 
knowledge  uncertainty  Is  associated  with  cases  where  the  model  parameter 
Is  not  a  random  or  fluctuating  variable,  but  the  analyst  slowly  does  not 
know  tdiat  the  value  of  the  parameter  should  be.  Both  of  these  data 
uncertainty  types  are  encountered  In  this  study. 


S.4.2.  Uncertainties 


The  sequence  frequency  results  discussed  In  this  report  are  pre¬ 
sented  In  terms  of  a  median  value  and  a  range  factor  of  a  probability 
distribution  representing  the  frequency  of  interest.  The  range  factor 
represents  the  ratio  of  the  95th  percentile  value  of  frequency  to  the 
50th  percentile  (l.e.,  median)  value  of  frequency.  The  uncertainty  In 
the  sequence  frequency  Is  determined  using  the  STADIC-2  program 
(Ref.  S-4)  to  propagate  the  uncertainties  associated  with  each  of  the 
events  In  the  fault  trees  or  event  trees  through  to  the  end  result. 

Some  scenarios,  such  as  those  associated  with  tornado  missiles  and  low- 
impact  detonations  have  rather  large  uncertainties.  The  difficulty  vd.th 
tornado-generated  missiles  lies  with  the  difficulty  In  accurately  model¬ 
ing  the  probability  that  the  missile  will  be  In  the  proper  orientation 
to  penetrate  the  munition  and  In  predicting  the  number  of  missiles  per 
square  foot  of  wind.  The  difficulty  with  the  low-impact  detonations 
lies  with  the  sparse  amount  of  data  available  and  Its  applicability  to 
the  scenarios  of  Interest.  In  general,  uncertainties  tend  to  be  large 
when  the  amount  of  applicable  data  is  small  and  vice  versa. 
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1.  INTROPOCTION 


1.1.  BACKGROUND 

The  U.S.  Department  o£  Defense  is  required  by  Congress  (Public  Law 
99-145)  to  destroy  the  stockpile  of  lethal  chemical  agents  and  munitions 
stored  at  eight  U.S.  Army  Installations  In  the  continental  United  States 
(CONUS)  and  at  the  Johnston  Atoll  Army  site  In  the  Pacific  Ocean  by  the 
end  of  September  1994.  The  locations  of  the  CONUS  sites  are  shown  In 
Fig.  1-1.  The  total  Army  stockpile  at  these  sites  Is  made  up  of  more 
than  3,000|000  Items  consisting  of  rockets,  mines,  mortars,  projectiles, 
cartridges,  bombs,  spray  tanks,  and  bulk  containers.  These  munitions 
contain  the  nerve  agents  GB  and  VX  and  the  blistering  mustard  agents  H, 
HD,  and  HT. 

The  Army  has  developed  a  plan  for  destruction  of  the  chemical  muni¬ 
tion  stockpile.  This  plan  Is  set  forth  In  the  Chemical  Stockpile  Dis¬ 
posal  Concept  Plan  submitted  to  Congress  In  March  1986  and  supplemented 
In  March  1987.  In  this  plan,  three  disposal  alternatives  are  described: 

1.  Disposal  of  the  agents  and  munitions  at  each  of  the  eight 
existing  storage  sites. 

2.  Collocation  and  disposal  of  the  munitions  at  two  regional 
sites. 

3.  Collocation  and  disposal  of  the  munitions  at  a  single  national 
site. 

These  three  disposal  alternatives  were  also  described  In  a  Draft 
Progammatlc  Environmental  Impact  Statement  published  by  the  Army  In 
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July  1986.  Additionally,  It  was  required  that  the  status  quo,  l.e., 
continued  storage,  be  also  evaluated  as  the  fourth  alternative.  As  part 
of  the  public  commentary  on  this  document,  requests  were  made  of  the 
Army  to  consider  also  the  transport  of  the  Inventory  from  Aberdeen 
Proving  Ground  to  Johnston  Island  by  water  or  to  Tooele  Army  Depot  by 
air  and  from  the  Lexlngton-Blue  Grass  Army  Depot  to  Tooele  by  air. 

Under  direction  from  the  U.S.  Army  Office  of  the  Program  Executive 
Officer  Program  Manager  for  Chemical  Demilitarization  (PEO-PM  Cml 
Demll),  GA  Technologies  Inc.  (GA)  and  Its  subcontractors  have  performed 
a  conq) rehens Ive  probabilistic  assessment  of  the  frequency  and  magnitude 
of  agent  release  associated  with  activities  Involving  the  three  disposal 
alternatives  currently  set  forth  In  the  Chemical  Stockpile  Disposal 
Program  (CSDP),  as  well  as  the  continued  storage  alternative.  This 
assessment  has  been  carried  out  In  support  of  the  environmental  Impact 
statement  (EIS)  for  this  program  and  It  addresses  only  the  stockpile  of 
chemical  munitions  which  are  currently  stored  at  the  eight  sites  located 
In  the  continental  United  States  (CONUS). 

When  combined  with  an  assessment  of  the  consequences  (Injuries 
and/or  deaths)  to  the  public  resulting  from  the  accident  sequences  and 
associated  agent  releases  Identified  and  evaluated  In  this  study,  the 
results  form  a  basis  for  an  assessment  of  public  risk.  The  dispersion 
of  the  agent  to  the  environment  and  the  assessment  of  consequences 
related  to  these  releases  are  outside  the  scope  of  this  study.  A  con¬ 
sequence  assessment  has  been  performed  by  MITRE  Corporation  and  Oak 
Ridge  National  Laboratory  for  the  EIS,  based  on  the  releases  Identified 
In  this  document. 

This  report  addresses  the  onsite  disposal  alternative  Identified 
above.  The  remaining  alternatives  are  discussed  In  separate  reports. 

Previous  studies  have  been  utilized  by  GA  as  reference  bases  for 
this  assessment.  Quantitative  hazards  analyses  were  performed  by 


Arthur  D.  Little,  Inc.  on  the  disposal  of  MSS  rockets  (Refs.  1-1  to 
1-S),  and  qualitative  hazards  analyses  were  performed  by  the  Ralph  M. 
Parsons  Conpany  on  the  Johnston  Atoll  Chemical  Agent  Disposal  System 
(JACADS)  design  (Refs.  1-6  and  1-7).  In  addition,  a  probabilistic  anal¬ 
ysis  of  chemical  agent  release  during  transport  of  MSS  rockets  has  been 
performed  by  H&R  Technical  Assoclatea  (Ref.  1-8),  and  a  probabilistic 
analysis  of  selected  hazards  during  the  disposal  of  MSS  rockets  has  been 
performed  by  Science  Applications  International  Corporation  (Ref.  1-9). 
These  studies  provided  the  set  of  accident  scenarios  that  was  conplled 
In  a  systematic  order  by  MITRE  Corporation  (Ref.  1-10  and  1-11).  GA,  In 
turn,  used  these  accident  scenarios  as  a  starting  point  In  this  study. 

The  analyses  performed  by  Arthur  D.  Little,  Inc.  used  a  technique 
known  as  hazard  and  operability  analysis  (HAZOP).  HAZOP  Involves  a 
detailed  review  of  plant  design  to  trace  all  parts  and  functions  of  the 
demilitarization  process.  For  each  piece  of  equipment  or  pipe  run, 
deviations  from  normal  operating  conditions  were  examined  and  possible 
consequences  were  discussed.  Through  this  approach,  potential  failure 
modes  leading  to  agent  release  outside  of  the  facility  were  Identified. 
The  expected  frequencies  of  occurrence  of  all  agent  release  sequences 
Identified  In  the  HAZOP  were  then  evaluated  using  fault  tree  analysis. 

The  qualitative  hazards  analysis  performed  for  JACADS  used  an 
approach  known  as  failure  modes  and  effects  analysis  (FMEA).  The  sever¬ 
ity  and  probability  levels  of  Identified  hazards  were  ranked  according 
to  the  guidelines  In  Ref.  1-11. 

The  transportation  studies  performed  by  H&R  Technical  Associates 
(Ref.  1-8)  used  a  combined  fault  tree  and  event  tree  approach  to  assess 
the  frequency  of  agent  release  from  transportation  accidents. 

The  work  performed  by  Science  Applications  International  Corpora¬ 
tion  (Ref.  1-9)  on  the  disposal  of  M55  rockets  utilized  both  event  tree 
and  fault  tree  methodology  as  used  In  the  PRA  of  nuclear  power  plants. 
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Onslt*  demilitarization  of  tha  chemical  munitions  stockpile 
requires  the  construction  of  facilities  to  destroy  the  contents  of  the 
munitions,  the  handling,  onsite  truck  transportation,  and  storage  of 
munitions  at  current  storage  sites,  the  destruction  of  the  munitions, 
and  the  decommissioning  of  the  constructed  facilities.  This  report 
addresses  each  of  these  activities,  except  for  facility  construction 
and  decommissioning. 
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1.2.  STUDY  OBJECTIVES  AND  SCOPE 


The  primary  objectives  of  the  study  reported  in  this  document  were 

to: 

1.  Identify  events  (for  each  major  activity)  that  could  initiate 
the  release  of  agent  to  the  environment. 

2.  Develop  the  various  sequences  of  events  resulting  from  these 
initiators  and  leading  to  agent  release. 

3.  Perform  a  quantitative  analysis  of  the  frequency  of  occurrence 
of  each  relevant  accident  sequence. 

4.  Characterize  the  form,  quantity,  and  duration  of  agent  release 
from  each  accident  sequence. 

5.  Identify  accident  sequences  which  make  the  most  significant 
contributions  to  risk. 

The  major  deliverables  of  this  effort  are  a  list  of  potential  acci¬ 
dent  sequences  for  each  major  activity,  the  estimated  frequencies  of 
these  sequences,  and  the  magnitudes  of  released  agent  associated  with 
these  sequences.  It  should  be  noted  that  only  accident  sequences  that 
survived  a  conservative  screening  process.  Involving  both  frequency  and 
magnitude  of  agent  release,  are  included  in  these  deliverables. 

This  report  addresses  each  of  the  objectives  listed  above  and  pre¬ 
sents  the  analysis  of  this  study.  The  risk  analysis  Includes  an  evalu¬ 
ation  of  potential  accidents  and  natural  occurring  phenomena  such  as 
earthquakes  and  tornadoes.  Acts  of  war,  sabotage,  and  terrorism,  which 
involve  Intentionally-Initiated  events,  were  not  Included  in  the  scope 
of  this  effort. 


Thtt  term  "chemical  iminitlons"  is  used  here  to  describe  both  burst- 


ered  chemlcel  nunltlons  end  chemical  bulk  Items.  The  4.2-ln.  mortars 
refer  to  the  actual  4.2-ln.  projectile  which  Is  fired  from  mortar  can¬ 
nons  or  tubes.  The  105-mm  cartridge  and  4.2-ln.  mortar  projectile  can 
either  be  configured  with  propellant  (l.e.,  a  cartridge)  or  without 
propellant  (l.e.,  a  projectile).  In  this  study,  It  was  assumed  that  the 
propellent  and  fuze  were  removed  prior  to  the  onset  of  the  disposal 
program. 


1.3.  DEMILITARIZATION  ACTIVITIES  AND  SAFETY  CONCERNS 


Figure  1-2  shows  a  comparison  of  the  various  logistics  phases  asso¬ 
ciated  with  the  various  munition  disposal  and  storage  alternatives  eval¬ 
uated  for  the  EIS.  As  indicated  in  this  figure,  the  demilitarization 
process  associated  with  the  onsite  disposal  alternative  can  be  divided 
into  four  general  areas  of  activity:  storage,  plant  operations,  han¬ 
dling,  and  onsite  transport.  Except  for  the  offsite  transport  activity, 
the  collocation  alternatives  Involve  the  same  logistic  phases.  In  con¬ 
trast,  only  the  storage  activity  is  of  concern  for  the  continued  storage 
option. 

For  each  of  these  activities  or  phases,  the  hazards  of  interest 
are  those  involving  the  evaporative  release  of  agent  to  the  environment 
resulting  from  spills,  leaks,  and  mechanical  failures,  and  the  release 
of  agent  to  the  environment  resulting  from  fires  and  explosions.  The 
generation  of  these  potential  hazards  originates  with  a  number  of 
"internal"  and  "external"  initiating  events.  The  number  of  hazard- 
initiating  event  combinations  is  rather  extensive.  Ho\«ever,  because  of 
the  screening  process  which  was  used  to  remove  from  further  consider¬ 
ation  the  accident  sequences  whose  frequency  was  low  and/or  the  asso¬ 
ciated  magnitude  of  agent  release  was  low,  the  number  of  individual 
sequences  which  are  iiiq>ortant  to  risk  is  relatively  small. 


1.4.  STUDY  ASSUMPTIONS 


The  risk  analysis  presentad  In  this  report  uses  an  approach 
that  combines  the  structured  safety  analysis  detailed  In  HIL-STD-682B 
(Ref.  1-12)  and  the  probabilistic  approach  used  In  the  safety  analyses 
of  nuclear  power  plants  (Ref.  1-13).  Reference  1-12  requires  that  haz¬ 
ards  analyses  be  performed  In  order  to  assess  the  risk  Involved  during 
the  planned  life  expectancy  of  a  system.  It  also  provides  some  guidance 
on  the  categorization  of  hazard  severity  and  probability  as  a  means  of 
Identifying  ^Ich  hazards  should  be  eliminated  or  reduced  to  a  level 
acceptable  to  the  managing  activity. 

The  risk  analysis  was  perforowd  under  the  following  set  of  general 
assuoptlons : 

1.  Onsite  transportation  of  munitions  will  be  by  truck. 

2.  Munitions  will  be  stored  In  their  current  storage  locations 
and  will  be  transferred  to  the  demilitarization  facility  (same 
site)  as  needed. 

3.  The  baseline  process  design  will  be  used  (l.e.,  JACAOS  type 
facility).  At  TEAD,  sonw  existing  process  equipment  will  be 
used.  The  design  Includes  a  bulk-only  facility  as  well  as  a 
mixed  munition  plant  design  similar  to  the  JACADS  design.  The 
design  of  the  CONUS  demilitarization  facilities  Is  now  approx¬ 
imately  3SZ  coiq>lete. 

4.  Munitions  are  In  good  condition  during  the  handling,  transpor¬ 
tation,  and  disposal  activities. 


5.  Sabotage  or  terrorism  Is  not  considered. 


1.5.  REPORT  FORMAT 


This  report  is  structured  as  outlined  schematically  In  Fig.  1-3. 

The  structure  follows  that  typically  used  In  comprehensive  probabilistic 
risk  assessment  (PRA)  studies.  Following  the  Introduction  In  Section  1 
of  this  report,  Section  2  provides  a  summary  of  the  methodology  used  In 
this  frequency  of  release  assessment.  Including  the  procedure  for  acci¬ 
dent  scenario  Identification  and  screening,  the  approach  used  for  quan¬ 
tifying  accident  frequencies  and  characterizing  agent  release,  and  the 
treatment  of  uncertainties. 

Section  3  provides  a  brief  discussion  of  the  various  activities 
Involved  In  the  disposal  of  chemical  munitions.  This  discussion  Is  pro¬ 
vided  to  assist  readers  In  the  understanding  of  the  Initiating  events 
and  accident  scenarios  that  have  been  Identified  and  are  discussed  In 
Sections  4  through  8.  This  section  also  discusses  site-specific  Infor¬ 
mation  that  Is  Important  to  a  particular  site.  Appendix  D  contains 
additional  site  Information. 

The  list  of  accident  Initiating  events  which  have  been  analyzed  Is 
along  with  the  analysis  of  their  occurrence  frequencies  are  presented  In 
Section  4.  These  events  Include  accidents  from  Internal  causes,  such  as 
Inadvertent  lnq>act  during  handling,  and  accidents  caused  by  external 
events,  such  as  earthquakes  or  aircraft  crashes. 

Sections  5  through  8  present  the  detailed  development  and  analysis 
of  the  key  accident  scenarios  resulting  from  the  Initiating  events. 

Section  9  provides  the  basis  for  quantification  of  accident 
sequence  frequencies  Including  munition  failure  probabilities,  the  data 
base  used  for  estimating  the  probabilities  of  event-tree  top  events  and 
fault-tree  basic  events,  and  the  data  used  for  assessing  human  error. 
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Fig.  1-3.  Outline  of  report  structure 
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CR-2300y  1982. 


2.  RISK  ASSESSMENT  METHODOLOGY 


2.1.  OVERVIEW 

The  probabilistic  risk  assessment  (PRA)  methodology  used  In  this 
study  Is  generally  consistent  with  the  PRA  Procedures  Guide  (Ref.  2-1) 
for  nuclear  power  plants.  Figure  2-li  adapted  from  that  guide,  outlines 
the  risk  assessment  procedure  for  this  study.  Certain  specific  features 
of  the  demilitarization  process  dictate  some  different  en^hasls  and 
treatments  from  those  described  In  Ref.  2-1.  The  risk  assessment  steps 
corresponding  to  the  procedures  In  Fig.  2-1  are  as  follows: 

1.  Identify  accident  Initiators  (Initiating  events)  through 
Information  collection,  hazards  analyses,  or  the  use  of  master 
logic  diagrams.  The  Initiating  events  are  classified  as 
external  If  they  originate  from  outside  the  demilitarization 
process  (such  as  aircraft  crash)  and  as  Internal  otherwise. 

2.  Define  accident  scenarios,  l.e.,  combination  of  initiating 
events  and  the  successes  or  failures  of  systems  that  respond 
to  the  Initiating  event.  An  "accident  sequence"  Is  referred 
to  In  this  report  as  a  specific  end  point  of  an  accident  sce¬ 
nario,  which  Is  usually  modeled  using  event  trees.  An  "event 
tree"  Is  an  Inductive  logic  model  which  traces  the  sequence  of 
events  that  can  occur  following  an  Initiating  event. 

3.  Construct  "fault  trees"  (deductive  system  logic  models)  to 
determine  the  root  causes  of  individual  system  failures.  The 
fault  tree  Is  reduced  to  minimal  cut  sets  using  Boolean  alge¬ 
bra.  A  "minimal  cut  set"  represents  a  unique  combination  of 
events  leading  to  system  failure. 


Assign  failure  rates  or  probabilities  to  events  (con^onents  or 
subsystem)  modeled  In  the  event  trees  and  fault  trees.  Quan¬ 
tify  the  frequencies  of  occurrence  of  accident  sequences  from 
either  the  event  tree  or  fault  tree  by  confuting  the  product 
of  the  Initiating  event  frequency  and  the  probabilities  of  the 
subsequent  conditional  events  In  a  given  accident  scenario. 

Determine  the  consequences  of  the  accident  sequences.  In  this 
analysis,  the  consequence  of  concern  Is  the  amount  of  agent 
released  to  the  local  free  environment.  The  Impact  of  agent 
release  on  the  population  will  be  used  by  others  In  their  CSDP 
analysis. 

Evaluate  the  uncertainties  In  the  data  base,  and  predict  the 
uncertainty  In  each  relevant  accident  sequence  frequency  by 
propagating  the  top  event  uncertainties  through  the  event 
trees. 

Present  the  results  (i.e.,  accident  scenario  frequency  and 
consequence)  In  a  form  that  will  best  show  those  scenarios 
that  are  liiq>ortant  to  risk  and  will  reflect  the  uncertainties 
associated  with  the  accident  sequence  frequency. 
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2.2.  INITIATING  EVENTS 

An  Initiating  event  is  a  single  occurrence  or  malfunction  that  has 
the  potential  to  release  one  or  more  agents  or  to  start  a  sequence  of 
events  that  could  lead  to  a  release.  The  list  of  Initiating  events  is 
developed  based  on  previous  demilitarization  studies  (Section  1.2)  and 
related  PRAs  such  as  Waste  Repository  studies  (e.g.,  Ref.  2-2),  in 
addition  to  the  use  of  master  logic  diagrams. 

The  initiating  event  list  is  developed  in  top-down  fashion  by 
structuring  a  master  logic  diagram  to  define  a  functional  set  of  initi¬ 
ating  categories.  These  categories  form  a  complete  set  in  the  sense 
that  any  event  which  leads  to  agent  release  must  cause  at  least  one  of 
these  categories  to  occur. 

Some  "comnon  cause  initiating  events**  (e.g.,  an  earthquake)  can 
activate  more  than  one  Initiating  event  category  and  disable  controls 
for  release.  While  there  is  no  way  to  guarantee  that  all  such  events 
are  Identified,  two  areas  yield  the  most  significant  events.  The  first 
Includes  severe  environmental  events  (such  as  fire,  flood,  earthquake, 
and  wind)  as  well  as  hazardous  activities  in  the  vicinity  (such  as  air¬ 
craft  patterns).  The  second  area  Includes  malfunctions  that  can  affect 
multiple  controls  or  barriers  for  the  prevention  of  release  to  the 
atmosphere. 

Coincident  with  the  development  of  the  list  of  initiating  events  is 
the  assessment  of  the  initiating  event  frequencies.  This  is  required, 
first,  for  subsequent  quantification  of  event  trees,  since  the  event 
initiator  is  the  first  event  of  the  tree.  Second,  it  enables  screening 
of  the  list  of  Initiating  events,  l.e.,  events  having  extremely  low 
frequencies  can  be  eliminated.  Where  possible,  the  Initiating  events 
are  grouped  into  categories  when  the  subsequent  event  tree  and  release 
analysis  development  is  the  same  for  all  initiating  events  in  the 
category.  This  grouping  is  performed  by  Boolean  summation  of  the 
occurrence  frequencies,  accounting  for  dependencies,  if  any. 
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2.3.  SCENARIO  DEVELOPMENT  AND  LOGIC  MODELS 


Given  the  occurrence  of  an  initiating  event  (IE),  accident  sce¬ 
narios  are  developed,  in  many  cases  using  logic  models  of  either  event 
trees,  fault  trees,  or  both,  to  arrive  at  the  various  outcomes  of  the 
scenario  progression.  Each  of  these  outcomes,  termed  a  sequence,  is 
associated  with  (or  even  characterized  by)  a  certain  level  of  agent 
release.  The  basic  premise  of  the  risk  summation  process  is  that 
release  frequencies  (initiating  event  frequency  multlplicatlvely 
combined  with  probabilities  of  subsequent  failures  necessary  to  get  the 
release)  of  entirely  different  sequences  can  be  additively  combined  to 
get  the  overall  frequency  of  release.  The  additive  and  multiplicative 
combination  is  performed  using  Boolean  algebra  and  accounts  for 
dependencies. 

Figure  2-2  shows  a  sanq>le  event  tree.  In  this  example,  the  IE  is  a 
vehicle  collision,  having  an  estimated  occurrence  frequency  which  can  be 
a  point  estimate  or  be  probabilistically  distributed.  The  IE  is  the 
first  "top  event,"  and  potential  subsequent  failures  represent  the  other 
top  events  or  branch  points.  These  top  events  are  in  the  form  of  ques¬ 
tions,  and  by  convention  the  upper  branch  represents  the  positive  answer 
sequence  and  the  lower  branch  is  the  negative  answer  sequence.  Branch 
split  fractions  or  probabilities  are  assigned  at  each  of  these  branch 
points.  These  split  fractions  may  be  point  estimates  or  probabilistic 
distributions,  and  may  not  be  the  same  for  all  branch  points  under  a 
specific  top  event,  depending  on  prior  events.  That  is,  the  split 
fractions  represent  conditional  probabilities. 

The  frequency  of  an  accident  sequence  is  calculated  based  on  the 
following  equation: 


where  Fj  »  frequency  of  accident  sequence  J , 

Ij  *  initiating  event  frequency, 

*  conditional  probability  of  sequence  event  1  following  an 
initiating  event,  Ij . 

Accident  frequency  and  equipment /component  failure  rate  data  were 
derived  from  various  sources,  as  described  In  Section  9. 

In  this  study,  the  event  trees  are  relatively  simple  In  form  com¬ 
pared  to  those  developed  for  nuclear  plant  PRAs.  Most  dependencies  are 
modeled  explicitly  In  the  event  trees  by  use  of  conditional  branching 
probabilities  which  are  dependent  upon  the  branch  taken  for  prior 
events.  For  exao^le,  In  an  event  tree  \^ere  two  consecutive  top  events 
represent  the  availabilities  of  systems  1  and  2,  system  2  might  not  be 
called  upon  unless  system  1  falls.  This  would  be  shown  In  the  event 
tree  by  a  dashed  line  for  system  2  In  the  system  1  success  branch,  indi¬ 
cating  not  applicable.  Conversely,  if  system  2  Is  capable  of  operating 
only  In  conjunction  with  successful  operation  of  system  1,  the  dashed 
line  Is  shown  on  the  system  1  failure  (no)  branch  for  system  2  top 
event.  This  Indicates  a  guaranteed  failure  of  system  2,  given  nonopera¬ 
tion  of  system  1. 

For  many  scenarios,  it  was  found  convenient  to  use  fault  tree  logic 
for  development  of  the  accident  progression  and  quantification  of  the 
sequence  frequencies.  Figure  2-3  depicts  a  sample  fault  tree.  Logic 
symbols  used  In  constructing  fault  trees  are  defined  in  Fig.  2-4.  The 
approach  taken  for  treatment  of  dependencies  In  the  event  trees  is  to 
Identify  specific  Intercomponent  and  Intersystem  causes  of  multiple 
failures.  If  any,  directly  In  the  fault  tree  and  to  make  an  allowance 
for  those  not  explicitly  identified.  A  Beta  factor  method  (e.g.. 

Ref.  2-3)  Is  a  convenient  tool  for  determining  a  suitable  allowance  and 
was  used  where  appropriate.  In  this  method,  multiple  failures  of 
redundant  components  are  assumed  to  occur  In  a  dependent  fashion;  the 
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Fig.  2-A.  Definition  of  fault  tree  symbols 


parameter  P  Is  defined  as  the  fraction  of  failures  experienced  In 
components  that  are  common  cause  failures. 

Just  as  there  are  uncertainties  In  estimating  con:ponent  failure 
rates,  there  are  also  uncertainties  In  the  P  factor.  These  uncertain¬ 
ties  were  quantified  assuming  lognormal  distribution  for  the  P  factor. 
The  uncertainty  distribution  accounts  for  uncertainties  due  to  sparsity 
of  data,  as  well  as  those  due  to  classification  and  the  so-called 
"potential  common  cause  failures."  These  are  events  In  which  one 
failure  actually  occurs  and  additional  failures  could  have  occurred 
under  different  circumstances,  as  well  as  Incipient  failures  and 
degraded  operability  states. 

In  the  case  where  the  fault  sequence  1,  given  an  Initiating  event. 
Involves  a  subsystem  or  equipment  failure,  the  failure  probability  cal¬ 
culations  may  Involve  not  only  the  calculation  of  the  unavailability 
value  (probability  of  failure  per  demand)  but  also  the  unreliability 
value  (probability  of  failure  while  component /equipment  Is  running).  In 
this  case,  the  overall  failure  probability  value  for  a  given  equipment 
or  subsystem  Is  calculated  using  the  following  equation  (Ref.  2-3): 

Pi  -  Pi,d  +  (1  -  Pi,d)  Pl,r  .  (2-2) 

where  ~  failure  upon  demand  (unavailability), 

>  failure  while  running  (unreliability). 

The  calculation  of  component  unreliability  (Pj.,]^)  Is  Influenced 
by  several  factors:  (1)  the  frequency  of  periodic  maintenance  (PM); 

(2)  the  use  of  different  failure  detection  systems;  and  (3)  the  various 
methods  used  to  monitor  equipment  operation. 

For  the  analysis  presented  In  this  report,  two  options  were  consid¬ 
ered  In  the  calculation  of  component  unreliability.  The  first  option 
was  to  consider  the  periodic  maintenance  of  a  component.  Thus,  when  a 


component  is  periodically  removed  from  service  for  preventative  mainte¬ 
nance,  the  failure  probability  Is  dominated  by  the  maintenance  Interval 
In  addition  to  the  failure  rate  according  to  the  following  equation: 


P 


IfT 


(1 


where  X  *  failure  rate, 

6  »  maintenance  Interval. 


(2-3) 


The  second  option  was  to  consider  continuous  component  surveillance 
which  decreases  the  failure  probability  by  announcing  component  failure 
to  the  operators  concurrent  with  failure  Initiation.  The  repair  time 
required  to  restore  the  conq>onent  becomes  an  Important  factor  as  shown 
In  the  following  equation: 

Pl,r  -  rH 

where  1/  *  l/r  mean  repair  rate  (per  h) , 

T  =  repair  time  (h) , 
t  *  time  Interval  of  Interest. 

In  Eq.  2-5  the  failure  probability  approaches  Xt  as  the  time  Interval 
Increases  and  Xt  Is  small  (l.e.,  Xr  «  1). 

In  most  of  the  component  failures  Identified  In  the  fault  tree 
models,  the  first  option  Is  used  (l.e.,  calculating  reliability  as  a 
function  of  maintenance  Interval)  and  a  monthly  PM  Interval  Is  assumed 
(l.e.,  maintenance  Interval  of  528  h)  for  the  equipment.  This  Is  a 
conservative  approach  In  deriving  the  failure  probability.  If  a  more 
frequent  maintenance  policy  Is  adopted  or  If  experience  shows  that  the 
component  restoration’  time  Is  much  less  than  the  maintenance  Interval, 
the  failure  probability  will  decrease.  However,  In  view  of  the  nature 
of  the  fault  tree  models,  this  approach  seems  Justified  because  the 
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failure  contribution  of  a  particular  con^onent  Is  not  negated  by 
assuming  an  unnecessarily  low  failure  probability. 


2.4.  HUMAN  FACTORS 

The  treatment  of  Intersystem  and  Intercco^onent  equipment  depen¬ 
dencies  Is  discussed  above,  Including  how  dependencies  are  taken  Into 
account  by  the  logic  models.  This  section  describes  another  kind  of 
dependence — that  Involving  human  Interaction. 

To  the  extent  that  human  beings  design,  construct,  operate,  and 
maintain  the  plant.  It  Is  In^osslble  to  fully  Isolate  the  role  of  human 
Interactions  from  any  of  the  dependencies  discussed  above  in  terms  of 
hardware  Interactions.  Hence,  all  of  the  common  cause  analysis  methods 
described  above  pertain  directly  or  Indirectly  to  human  Interactions. 

The  discussion  Is  restricted  here  to  human  Interactions  in  the  operation 
and  maintenance  processes. 

The  procedure  used  for  analysis  of  Intersystem  and  Intercomponent 
dependencies  caused  by  human  Interactions  was  to  Include  human  errors  of 
omission  and  commission  explicitly  In  the  event  tree/fault  tree  models 
and  to  use  the  human  reliability  methods  of  Swain  (Ref.  2-4)  to 
Implement  quantification.  A  starting  point  for  the  Identification  of 
specific  errors  Is  the  analysis  of  operation  and  maintenance  procedures 
if  they  have  been  defined  for  the  event  sequence  being  Investigated. 

This  Is  especially  liiq>ortant  If  operator  action  Is  required  to  effect 
actuation  of  a  system  or  a  collection  of  systems.  Consideration  needs 
to  be  given  to  possible  incorrect  Judgments  as  to  the  plant  state  and 
subsequent  Implementation  of  the  wrong  procedures.  Once  these  acts  are 
Identified  and  modeled,  the  problem  of  determining  contribution  to  risk 
by  operator  actions  Is  reduced  to  assigning  the  correct  human  error  rate 
values. 


2.5.  RELEASE  CHARACTERIZATION 
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The  risk  associated  with  each  accident  scenario  requires  not  only 
the  quantification  of  the  frequency  of  that  scenario  but  a  characteriza¬ 
tion  of  the  agent  release  as  well.  This  characterization  Involves  the 
type  and  amount  of  agent  released,  and  the  mode  duration  of  the  release. 

At  any  given  time,  there  Is  at  least  one  containment  barrier  sepa¬ 
rating  the  agent  from  the  surrounding  environment.  Thus  failure  or  loss 
of  Integrity  of  this  barrier  must  occur  for  agent  to  be  released  to  the 
environment. 

In  general,  the  accident  scenarios  Interest  can  be  divided  Into  two 
groups:  (1)  those  scenarios  In  which  the  agent  Is  Inside  the  munition 

(e.g.,  scenarios  Involving  transportation  accidents),  and  (2)  those  In 
which  the  agent  has  been  removed  from  the  munition  (plant  operations 
accident  scenarios).  For  both  of  these  groups  there  are  essentially 
three  types  of  agent  release  to  the  environment! 

1.  Evaporation  from  a  liquid  spill. 

2.  Releases  resulting  from  detonations. 

3.  Releases  resulting  from  fires. 

Various  combinations  of  these  releases  appear  in  many  of  the  scenarios. 
In  addition,  depending  on  the  location  of  these  events  (e.g..  Indoor 
versus  outdoor  spills),  the  evaporation  rates  governing  these  releases 
may  vary  somewhat. 

The  approach  taken  for  assessing  the  amount,  type,  and  duration  of 
agent  release  Is  based  on  deterministic  models  which  stem  from  previous 
demilitarization  safety  studies  described  In  Section  1.1.  These  models 
are  based  largely  on  data  but  also  engineering  Judgment.  They  are 
described  In  Section  10.1. 
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Elcmnts  of  th«  modol  include  eocceletlons  for  evaporation  release, 
based  on  the  D2PC  computer  program.  In  many  cases,  the  D2PC  computer 
program  was  used  directly  to  calculate  evaporative  releases.  Other  ele- 
awnts  include  the  fraction  of  burning  agent  which  is  released  as  vapor 
and  the  fraction  of  a  detonating  munition  Inventory  which  is  released  as 
vapor.  The  model  relies  heavily  on  data  and  analysis  of  munitions  fail¬ 
ure  thresholds,  summarized  in  Appendix  P,  to  deterailne  the  extent  of 
munition  failures.  Including  the  potential  for  failure  propagation  of 
munitions.  It  is  this  area  where  engineering  Judgment  was  needed  to 
supplement  the  data  and  analysis.  Where  Judgmental  factors  entered  in, 
they  were  routinely  made  in  a  conservative  manner  to  cover  possible 
uncertainties . 
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2.6.  UNCERTAINTY  ANALYSIS 


Estimates  of  failure  probabilities  derived  from  various  data 
sources  are  subject  to  uncertainties.  Data  sources  do  not  always  spe¬ 
cify  what  failure  modes  are  represented,  what  environment  Is  applicable, 
or  what  Is  the  total  statistical  population.  In  some  cases,  failure 
data  may  not  be  available  for  a  specific  event;  therefore,  data  for 
events  that  occur  under  conditions  that  are  similar  to  the  events  under 
consideration  are  selected  as  representative.  These  considerations 
result  In  uncertainties  that  are  reflected  In  the  range  of  possible 
numerical  values  for  an  event. 

For  events  Involving  equipment  failures,  a  lognormal  distribution 
was  assumed  to  define  the  uncertainty  In  the  failure  probability.  The 
lognormal  distribution  was  explicitly  used  In  Ref.  6-18  and  other  PRA 
studies  of  nuclear  power  plants  because  of  its  mathematical  behavior. 

For  the  analysis  covered  In  this  report,  equipment  failures  and  accident 
initiators  that  are  either  man-made  or  arise  from  natural  causes  are 
assumed  to  be  lognormally  distributed. 

In  the  analysis  of  accident  scenario  probabilities,  the  STADIC-2 
conq>uter  program  (Ref.  2-5)  was  used  to  combine  probability  distribu¬ 
tions  of  a  series  of  event  sequences  which  make  up  an  accident  scenario. 
STADIC-2  uses  a  Monte  Carlo  simulation  technique  to  generate  a  pseudo¬ 
random  saaq>le  statistical  distribution  for  a  user-defined  output  func¬ 
tion.  Each  Input  variable  exhibits  random,  statistical  variations  that 
are  represented  by  a  particular  probability  distribution  (lognormal, 
normal,  etc.).  The  statistical  distribution  for  the  output  function 
(and  accident  scenario  probability  In  this  case)  Is  generated  by  com¬ 
bining  the  distributions  In  accordance  with  the  mathematical  operations 


•p«el£l«d  by  that  function.  This  combining  of  distributions  is  accom¬ 
plished  as  follows  I 

1.  Each  Honta  Carlo  sample  consists  of  selecting  one  pseudo¬ 
random  sao^le  value  for  each  input  variable  from  its  corre¬ 
sponding  statistical  distribution. 

2.  The  set  of  sanq>le  variable  values  are  mathematically  combined 
to  find  the  corresponding  value  of  the  function. 

3.  Sampling  is  continued  in  this  manner  until  the  desired  sanq>le 
size  is  attained. 

A.  The  results  consist  of  the  pseudo- randomly  generated  values  of 
the  output  function. 

Probabilistic  data  base  uncertainties  are  the  only  uncertainties 
explicitly  quantified  in  this  analysis.  Although  data  base  uncertain¬ 
ties  are  important*  the  accident  frequency  calculations  are  also  sensi¬ 
tive  to  assuoq>tlons  Incorporated  into  the  probabilistic  assessment. 

Since  the  vmcertainties  in  these  assuaq>tions  are  extremely  difficult  to 
quantify,  conservative  assusptlons  are  consistently  used  in  this  risk 
analysis. 

Figure  2-5  depicts  the  inq>act  of  this  methodology  (identified  as 
Method  1  in  the  figure)  on  the  accident  frequency  assessment  results. 
Essentially,  this  awthodology  produces  a  conservative  nominal  frequency 
estimate,  and  underestimates  the  size  of  the  confidence  bands.  However, 
the  error  associated  with  the  confidence  band  estimate  primarily  results 
in  predicting  a  much  higher  value  for  the  lower  confidence  band  than 
actually  exists.  (Compare  the  results  of  Methods  1  and  3  in  Fig.  2-5.) 
Hence,  the  uncertainty  assessment  methodology  enployed  in  this  analysis 
overestimates  nominal  accident  frequencies  and  the  confidence  in  the 
predicted  frequency. 


2 
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UNCERTAINTY  ASSESSMENT  METHODOLOGY 


METHOD 

DESCRIPTION 

1 

CONSERVATIVE  ASSUMPTIONS,  ONLY  DATA  BASE 
UNCERTAINTIES  QUANTIFIED 

2 

CONSERVATIVE  ASSUMPTIONS,  ALL  UNCERTAINTIES 
QUANTIFIED 

3 

REALISTIC  ASSUMPTIONS,  ALL  UNCERTAINTIES 
QUANTIFIED 

No  quantitative  uncertainty  analysis  Is  performed  for  the  agent 
release  calculations,  due  to  the  complexity  Involved  In  such  an  assess¬ 
ment.  Instead,  conservative  releases  are  calculated.  Because  of  the 
complex  phenomenology  that  governs  agent  release,  sensitivity  studies 
were  conducted  to  assure  that  the  agent  release  estimates  are.  Indeed, 
bounding.  These  sensitivity  analyses  are  presented  In  Appendix  B. 
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3.  DEMILITARIZATION  DESCRIPTION  OVERVIEW 


Chemical  munitions  are  currently  stored  at  eight  CONUS  sites 
(Fig.  1-1).  A  description  of  the  CONUS  sites,  Including  local  maps,  Is 
given  In  Appendix  D.  Section  3.2  provides  a  summary  description  of  the 
munitions . 

A  detailed  discussion  of  the  storage,  handling  operations,  trans¬ 
port,  and  decommissioning  activities  related  to  the  alternatives  Is 
presented  In  Appendix  G.  Section  3.1  provides  a  summary  of  these 
activities  as  they  relate  to  the  risk  study.  Data  for  the  munition 
transport  containers  are  presented  In  Section  3.3. 

3.1.  ONSITE  DISPOSAL  ACTIVITIES  AND  RISKS 

The  major  activities  for  the  onsite  disposal  option  are  outlined 
in  Fig.  3-1.  The  activities  begin  with  the  munitions  at  each  CONUS  site 
In  their  existing  storage  locations  In  magazine  Igloos,  warehouses  or 
open  areas.  Long-term  risks  associated  with  continued  storage,  such  as 
earthquakes  and  munition  maintenance,  are  reduced  by  shipment  to  the 
disposal  facilities.  This  risk  reduction  must  be  weighed  against  risks 
associated  with  the  transfer  and  disposal  of  the  munitions.  Elements  of 
the  added  risks  are:  added  risks  created  by  establishing  holding  areas 
and  interim  storage,  handling  operations,  onsite  transport,  and  disposal 
operations.  These  are  discussed  In  the  following  paragraphs. 

3.1.1.  Storage 


During  storage,  the  only  planned  activities  are  monitoring  for 
leakage,  surveillance  and  maintenance,  and  repair  of  munitions.  Inter¬ 
nal  events  for  storage  thus  address  leakage  between  Inspections  and 
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munition  drop  or  forklift  tine  puncture  during  munition  handling.  The 
stored  munitions  are  susceptible  to  external  events,  such  as  fire, 
tornado,  aircraft  or  meteorite  crash,  earthquake  flood,  and  lightning. 

3.1.2.  Handling 

Basically,  the  risks  associated  with  these  handling  operations  stem 
from  Internal  handling  accidents,  caused  by  equipment  failures  or  human 
error.  Types  of  accidents  are:  vehicle  collisions,  forklift  tine  punc¬ 
tures,  and  drops  of  munitions.  The  munitions  affected  may  be  single,  in 
pallets  or  overpacks  (bombs  and  spray  tanks),  or  in  an  onsite  container 
(ONC).  Locations  of  the  agent  release  may  be  Indoors,  or  in  the  open 
(outdoors).  Externally  caused  handling  accidents  were  not  considered  in 
this  analysis  because  of  the  short  time  involved  in  actual  outdoor  han¬ 
dling  operations.  Also,  the  analyses  for  plant  operations  and  storage 
considers  the  effect  of  external  events  on  all  munitions  within  build¬ 
ings  or  Igloos,  regardless  of  whether  or  not  handling  is  in  progress. 

The  handling  risk  depends  on  the  number  of  handling  operations, 
such  as  packing,  loading,  and  separating,  moving  or  stacking  with  a 
forklift,  which  in  turn  depends  upon  the  sites  involved,  the  mode  of 
offsite  transport,  and  the  type  of  munition  moved.  Section  6  describes 
how  these  variables  were  factored  into  the  analysis. 

Packing  handling  operations  occur  first  at  the  site  storage  area, 
where  the  munitions  are  packed  inside  an  ONC  for  shipment  to  the  MHI. 
This  procedure  results  in  the  munition  always  being  in  the  ONC  while 
outdoors  onsite. 

Following  onsite  truck  transport,  the  ONCs  are  unloaded  at  the  MHI. 
The  MHI  is  a  part  of  the  demilitarization  facility.  The  packed  muni¬ 
tions  are  stored  on  an  interim  basis  in  the  MHI  before  they  are  moved  to 
the  package  unloading  facility  within  the  MDB  by  forklift. 


Loading  and  unloading  handling  operations  occur  at  multiple  times 
as  follows: 

1.  At  the  site  storage  area,  the  ONCs  are  loaded  Into  trucks  for 
onsite  transport. 

2.  At  the  MHI,  the  ONCs  are  unloaded  from  the  trucks  and  later 
loaded  onto  diesel  forklifts  for  transport  to  the  MOB. 

3.  At  the  MOB,  the  forklifts  deposit  the  ONCs  In  the  UFA  for 
final  processing. 

In  this  risk  study  forklift  transport  operations  are  assumed  to 
belong  to  the  handling  phase  while  truck  transport  Is  not. 

3.1.3.  Onsite  Transport 

Onsite  transport  encompasses  all  truck  transfer  operations  outlined 
above.  Associated  risks  consist  of  truck  collision  and/or  overturn 
accidents  with  the  munitions  configured  In  ONC  packages  (or  spray  tanks 
In  overpacks).  These  risks  depend  upon  the  expected  distance  of  truck 
travel. 

At  all  sites  the  truck  transfer  distance  from  storage  to  the 
holding  area  Is  assumed  to  be  one  mile. 

3.1.4.  Plant  Operations 

The  demilitarization  activity  Involves  all  processes  present  in  a 
JACADS-type  demilitarization  facility  Including  removal  and  deactivation 
of  explosives,  draining  and  Incineration  of  agent,  and  treatment  of  all 
process  effluents  and  ventilation  air.  For  this  study,  the  demilitari¬ 
zation  facility  is  defined  to  be  the  MHI,  where  munitions  await  process¬ 
ing,  and  the  MDB,  where  the  Incineration  occurs. 
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In  the  MDB  the  munitions  are  first  unpacked  In  the  package  unload¬ 
ing  facility.  They  are  then  transferred  to  the  unpack  area  where  they 
are  processed  by  conveyor  to  the  explosion  containment  room  or  munitions 
processing  bay. 


Risks  associated  with  the  plant  operations  (disposal)  phase  Include 
Internally  (human  error  or  equipment)  caused  accidents  resulting  In 
munition  drops,  spills,  and  fires  or  explosions  In  furnace  rooms. 
Externally  caused  risks  Involve  tornado,  meteorite,  aircraft  crash,  or 
earthquake  Induced  events.  The  potential  for  such  events  to  fall  pack¬ 


aged  munitions  In  the  MHI  or  UPA,  bare  or  disassembled  munitions  In  the 


MDB,  or  process  equipment  was  analyzed. 


3.1.5.  Decommissioning 


After  the  existing  stockpile  of  lethal  chemical  agent  and  munitions 
at  each  site  has  been  destroyed,  the  demilitarization  facility  will  be 
decommissioned.  The  activities  for  cleanup  and  closure  of  the  destruc¬ 
tion  facilities,  as  discussed  In  Chemical  Stockpile  Disposal  Flan 
(Ref.  3-1),  are  as  follows: 


1.  Decontamination  of  the  MDB  and  laboratory. 

2.  Disposal  of  all  solid  wastes  and  residues. 

3.  Certification  of  the  plant  and  site  as  nontoxic. 


An  evaluation  of  risks  associated  with  decommissioning  Is  not  a 


3.2.  MUNITIONS  DESCRIPTION 


This  section  describes  the  munitions  that  comprise  the  CONUS  muni¬ 
tions  stockpile.  The  munitions  stored  at  each  site  are  summarized  In 
Table  3-1.  As  indicated  the  Inventory  of  munitions  and  bulk  agent  in 
storage  differs  greatly  from  £.lte  to  site.  Detailed  information  on  the 
precise  numbers  of  chemical  agent  munitions  at  each  site  Is  classified 
except  for  the  Information  on  M55  rockets.  All  of  the  chemical  muni¬ 
tions  In  storage  are  at  least  18  yr  old  (production  of  new  chemical 
munitions  was  stopped  In  1968),  and  some  are  more  than  AO  yr  old. 

The  munitions  stockpile  consists  of  11  different  munition  types.  A 
detailed  description  of  each  munition  type,  including  a  discussion  of 
their  thresholds,  is  presented  in  Appendix  F.  A  brief  description  of 
the  munitions  follows. 

3.2.1.  Rockets 

The  M55  rockets  are  filled  with  either  GB  or  VX.  The  rockets  are 
equipped  with  fuzes  and  bursters  which  contain  explosives.  Propellant 
is  also  built  into  the  motor  of  the  rocket.  The  rocket  casing  is  made 
of  aluminum.  Some  of  the  rockets  have  a  leakage  problem. 

The  rockets  are  individually  packaged  in  fiberglass  shipping  tubes 
with  metal  end  caps.  Fifteen  containers  with  rockets  are  packed  on  a 
wooded  pallet. 

3.2.2.  Land  Mines 

Mines  contain  VX  and  explosive  charges.  The  mines  are  packaged 
three  to  a  steel  drum.  Mine  activators  and  fuzes  are  packaged  separate¬ 
ly  in  the  same  drum.  Twelve  drums  of  mines  are  contained  on  a  wooden 
pallet. 


TABLE  3-1 

DATA  FOR  ONSITE  CONTAINERS  (ONC) 


6-ft  diameter  by  8-ft  long  cylinder 


Failure  Criteria 


Exposure  to  engulfing  1850°F  detonates  burstered  munitions:  15  min 


Exposure  to  engulfing  1850®F  thermally  falls  munitions:  15  min 


Impact  failure:  40-ft  drop  (35  mph) 


Puncture:  Velocity /radius  =  100  m/s 


Crush:  50 t 000  lb  static  load 
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The  munitions  stockpile  contains  105-mm  projectiles  with  GB  or  mus¬ 
tard,  155-mm  projectiles  with  GB,  VX,  or  mustard,  8-in.  projectiles  with 
GB  or  VX,  and  4.2-ln.  mortar  projectiles  with  mustard.  Some  105-inm  pro¬ 
jectiles  are  stored  as  complete  rounds  containing  fuze,  burster  with 
explosive,  cartridge  case  and  propellant,  while  others  are  stored  with¬ 
out  bursters,  fuzes  and  propellant.  Mortars  are  stored  with  fuzes, 
bursters,  and  propellants.  The  155-mm  and  8-ln.  projectiles  are  also 
stored  with  and  without  bursters. 

The  105-mm  projectiles  are  packed  24-projectlles  to  a  pallet.  The 
4.2-in.  mortar  rounds  are  packed  48  to  a  pallet. 

155-mm  and  8-in.  projectiles  are  packaged  eight  and  six  projectiles 
on  a  wooden  pallet,  respectively. 

3.2.4.  Bombs 

There  are  three  types  of  bombs,  all  containing  GB  agent.  These  are 
the  MC-1,  a  750-lb  bomb,  the  MK-94,  a  500-lb  bomb,  and  the  MK-116 
("weteye"),  a  525-lb  bomb.  The  525-lb  bomb  is  designed  to  release  an 
aerosol  spray  of  agent  on  detonation.  The  bombs  are  stored  without 
explosives.  The  MC-1  bombs  are  packaged  two  to  a  wooden  pallet  and  the 
others  in  individual  metal  shipping  containers. 


3.2.5.  Spray  Tanks 


Spray  tanks  contain  VX  agent.  They  are  designed  for  releasing 
chemical  agent  from  slow-traveling,  low-flying  aircraft.  The  spray 
tanks  are  stored  in  a  metal  overpack  container. 


All  three  types  of  agent  are  stored  In  bulk  as  liquid  In  standard 
one-ton  steel  containers  (called  ton  containers).  Ton  containers  are 
not  palletized. 

Ton  containers  are  the  only  Items  stored  at  the  Aberdeen  Proving 
Ground  (APG)  and  Newport  Army  Ammunition  Plant  (NAAP) .  The  ton  contain¬ 
ers  at  APG  contain  mustard  (HD),  while  NAAP  has  VX-£llled  ton  contain¬ 
ers.  ANAD  has  ton  containers.  PBA  has  mustard-filled  ton  containers. 
TEAD  has  all  types  of  bulk  agent  In  storage.  UMDA  has  mustard-filled 
ton  containers. 


3.3.  MUNITION  PACKAGING  AND  TRANSPORT 


Transport  from  the  disposal  site  storage  to  the  demilitarization 
facility  is  done  with  munitions  in  onsite  containers  (ONCs).  The  fail¬ 
ure  criteria  for  these  containers  are  given  in  Table  3-1  (Ref.  3-1). 

Leakers  may  be  caused  by  the  corrosive  nature  of  the  chemical  agent 
on  the  materials  in  the  munitions  agent  compartment  wall.  When  leakers 
are  detected  in  storage,  the  munitions  are  packaged  in  a  special  leak- 
proof  package.  No  munitions  known  to  be  leaking  are  ever  transported 
unless  they  are  packaged  in  a  special  leak-proof  package.  Realisti¬ 
cally,  the  major  impact  of  corrosion  is  to  degrade  the  original  materi¬ 
als  such  that,  while  a  leak  has  not  occurred,  the  material  parameters 
upon  which  the  calculated  failure  thresholds  are  based  generally  do  not 
reflect  the  actual  condition  of  the  munitions.  The  extent  of  degrada¬ 
tion  is  unknown  and  cannot  be  considered  in  a  meaningful  way  in  the 
analyses  presented  in  this  report.  Therefore,  a  general  assumption  is 
that  the  effect  of  corrosion  or  other  material  degradation  is  neglected, 
and  a  leak  is  assumed  not  to  be  initiated  in  transport.  A  leaking  muni¬ 
tion  will  not  affect  the  public  unless  the  transport  package  fails,  but 
it  is  assumed  that  an  accident  must  occur  to  produce  package  failure. 

It  is  also  assumed  that  when  large  fires  (e.g.,  aircraft  crash) 
occur,  they  engulf  the  entire  transport  vehicle.  The  assumption  that 
the  "representative"  large  fire  always  engulfs  the  transport  vehicle  is 
very  conservative. 

The  structural  calculations  are  based  on  the  assumption  that  the 
munitions  impact  an  unyielding  surface,  but  because  such  surfaces  are 
seldom  encountered  in  real  accidents,  the  structural  failure  thresholds 
are  conservative. 


The  Sandla  National  Laboratory  (SNL)  transportation  data  base 
(refer  to  Sections  8  and  9)  Is  assumed  to  be  applicable  to  military 
transport.  Where  appropriate,  modifications  are  clearly  Indicated  to 
account  for  administrative  controls.  The  major  benefit  of  using  the  SNL 
transportation  data  base  Is  that,  In  addltldn  to  providing  accident 
rates  for  Impact,  fire,  etc.,  the  SNL  researchers  used  sophisticated 
modeling  to  produce  the  accident  environments  that  appear  In  the  figures 
showing  the  percentage  of  accidents  that  do  not  exceed  a  certain  force. 
These  curves,  or  accident  force  spectra,  are  based  on  the  best  data 
available  to  SNL  and  a  number  of  assumptions.  The  effect  of  administra¬ 
tive  controls  Is  to  change  either  the  data  or  the  assiunptlons  used  to 
generate  not  only  the  accident  rate  but  also  the  accident  force  spectra. 
Thus,  a  major  assvimptlon  In  this  report  Is  that  when  the  accident  rates 
are  modified  to  account  for  factors  unique  to  munitions  aircraft,  the 
accident  force  spectra  are  essentially  unchanged.  Use  of  the  SNL  curves 
is  conservative,  however. 

No  generally  accepted  method  to  quantify  the  probability  of  poten¬ 
tial  sabotage  events  In  a  risk  analysis  has  been  developed.  Thus,  any 
change  In  sabotage  risk  which  occurs  when  extra  packaging  Is  used  Is  not 
Included  In  a  quantitative  way. 
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4.  INITIATING  EVENTS 


This  section  describes  the  approach  used  to  Identify  and  select 
Initiating  events  and  to  assess  their  occurrence  frequencies.  As 
described  In  Section  2,  Initiating  events  are  single  occurrences  or 
Individual  malfunctions  that  either  directly  cause  the  release  of 
chemical  agents  or  start  a  sequence  of  events  that  could  lead  to  a 
release.  They  are  classified  as  external  events  when  caused  by  natural 
phenomena  (e.g.,  earthquakes)  or  man-made  Interferences  (e.g.,  aircraft 
crashes)  from  outside  the  demilitarization  cycle.  They  are  classified 
as  Internal  when  caused  by  human  error  or  equipment  failure  within  the 
demilitarization  process.  Section  4.1  describes  the  logic  used  for 
selection  of  the  Initiating  events.  Section  4.2  discusses  the  generic 
considerations  In  specifying  the  Initiating  event  frequency  units  (l.e. 
per  unit  time  or  per  operation) .  The  application  of  these  generic  fre¬ 
quency  estimates  to  specific  accident  scenarios,  locations,  and  demili¬ 
tarization  phases  are  discussed  In  the  sections  dealing  with  accident 
logic  model  development.  Sections  5  through  8. 

4.1.  INITIATING  EVENT  IDENTIFICATION  AND  SELECTION 

This  study  used  a  multifaceted  approach  for  Identifying  potential 
Initiating  events,  screening  out  those  which  (based  on  conservative 
scoping)  should  not  affect  the  overall  risk,  and  selecting  those  events 
warranting  further  analysis.  The  approach  consisted  of: 

1.  Developing  master  logic  diagram  (MLD),  a  logic  tool  described 
In  the  PRA  Procedures  Guide  (Ref.  4-1)  for  systematically 
examining  potential  modes  of  release,  pathways  for  release, 
barriers  against  release,  and  mitigating  safety  functions 
together  with  root  causes  (Initiators)  of  release. 


2.  Dividing  the  demilitarization  facility  (MDB)  into  spatial 
zones  and  examining  potential  sources  of  release  in  each  zone 
to  identify  Internal  Initiating  events  for  plant  operations. 

3.  Cross-referencing  results  from  items  1  and  2  with  a  list  of 
accident  scenarios  from  safety  related  studies  on  the  chemical 
weapons  disposal  program,  compiled  by  the  MITRE  Corporation  in 
Ref.  4-2. 


4. 


Applying  previous  munitions  risk  study  experience  in  Refs.  4-3 
through  4-11  (the  results  of  these  studies  are  described  in 
Section  1.1). 


5. 


Peer  review  by  the  Army  and  independent  consultants  during  the 
early  and  draft  report  phases  of  this  study. 


Two  criteria  were  used  to  screen  accident  sequences:  (1)  accidents 
with  extremely  low  frequency  (below  10“^®  per  year)  were  eliminated  from 
further  analysis,  and  (2)  those  with  low  consequences  (amount  of  agent 
release  below  0.3  lb  for  GB,  14  lb  for  H,  or  0.4  lb  for  VX)  were  also 
screened.  Events  with  frequencies  below  the  cutoff  have  little  meaning 
from  a  practical  standpoint,  since  the  expected  times  between  events  is 
measured  on  a  cosmic  scale  rather  than  on  a  scale  of  human  history.  The 
consequence  criteria  pertain  to  the  minimum  release  levels  that  would 
produce  acute  human  fatalities  0.5  km  from  the  incident,  based  on  envi¬ 
ronmental  Impact  calculations  performed  by  MITRE  (Ref.  4-2). 


For  bookkeeping  purposes,  a  coding  system  is  used  in  this  report  to 
identify,  organize,  and  refer  to  accident  sequences.  Not  all  accident 
sequences  were  encoded;  those  that  could  be  screened  out  early  because 
of  simple  conservative  scoping  analysis  bear  no  coding.  Conversely, 
many  sequences  that  were  screened  after  detailed  analysis  retain  their 
coding  but  may  not  be  in  the  final  lists  of  results.  However,  Appen¬ 
dix  A  contains  a  record  of  all  encoded  sequences. 
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Table  4-1  shows  the  coding  scheme  followed  for  identification 
of  accident  sequences.  The  coding  system  is  based  on  that  used  in 
Ref.  4-2.  The  first  two  letters  identify  the  demilitarization  phase 
(S  for  storage,  H  for  handling,  R  for  rail  transport,  V  for  truck  trans¬ 
port,  B  for  barge  transport,  L  for  LASH  transport,  and  P  for  plant  oper¬ 
ations)  and  the  offsite  transport  mode  option  or  division  of  activities 
for  that  phase,  if  any.  For  example,  VR,  VA,  and  VW  refer  to  onsite 
transport  for  rail,  air,  or  marine  options.  The  first  two  letters 
together  with  the  sequence  number  at  the  end  uniquely  Identify  an  acci¬ 
dent  sequence  of  events.  The  middle  letters  identify  the  munition/agent 
type  combinations  and  the  release  mode.  Throughout  this  report,  either 
the  entire  coding  is  used  or  sequences  are  referred  to  by  the  first  two 
letters  and  the  sequence  number. 

The  MLD  developed  for  the  risk  study  event  identification  is 
shown  in  Figs.  4-1  through  4-6.  Following  the  PRA  Procedures  Guide 
(Ref.  4-1),  the  top-level  logic  (Fig.  4-1,  level  1)  pertains  to  the  pub¬ 
lic  impact,  in  this  case,  exposure  to  chemical  releases  throughout  the 
various  phases  of  the  demilitarization  process  (storage,  plant  opera¬ 
tions,  handling,  onsite  transport  and  offsite  transport). 

Figure  4-2  shows  MLD  level  2  (release  mode  or  pathway)  and  subse¬ 
quent  levels  (barriers  to  release,  safety  functions  mltlgation/failure 
and,  finally  event  initiators)  for  storage,  including  interim  storage. 

It  shows  three  modes  for  release.  One  is  leakage  of  agent  from  corroded 
munitions,  such  as  leakage  of  a  ton  container  stored  in  open  areas. 
Another  is  Inadvertent  rupture  of  a  munition  during  maintenance.  The 
third  is  a  disruptive  influence  due  to  an  external  event.  Since  handl¬ 
ing  associated  with  incoming  and  outgoing  munitions  arc  considered  in 
the  handling  phase,  these  three  modes  logically  represent  the  possible 
ways  a  release  can  occur  in  the  storage  phase. 

Subsequent  levels  are  developed  considering  the  types  of  disruptive 
events  that  can  occur,  taking  into  account  Information  on  the  potential 
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TABLE  4-1 

ACCIDENT  SEQUENCE  CODING  SCHEME 


The  Accident  Scenario  Identification  Is  an  8-Character  Code 
for  the  Form:  XEYZliAuin  as  Defined  Below. 


Activity  (XX) 


Rail  Air  Ship  I 


Munltlon/Agent  Type 
Combinations  (YZ) 


Plant  operations 

PO 

PO 

PO 

1 

BG: 

bomb  containing  GB 

1 

BH: 

mortar  containing  H 

Storage,  long  term 

SL 

SL 

SL 

1 

CG: 

cartridge  containing  GB 

1 

CH: 

cartridge  containing  H 

Storage,  Interim 

SR 

SA 

SW 

1 

KG: 

ton  container  with  GB 

1 

KH: 

ton  container  with  H 

Handling,  at  facility 

HF 

HF 

HF 

1 

KV: 

ton  container  with  VX 

1 

MV: 

mine  containing  VX 

Handling,  onsite 

HC 

HA 

HW 

1 

PG: 

projectile  (155-mm) 

1 

containing  GB 

1 

PH: 

projectile  (155-mm) 

( 

containing  H 

Truck  transport 

VO 

VO 

VO 

1 

PV: 

projectile  (155-mm) 

1 

containing  VX 

1 

QG: 

projectile  (8-ln.) 

1 

containing  GB 

Release  Mode  (W) 


S:  Spill  or  leak 

C:  Cooq>lex  (e.g.,  detonation  with  fire) 
Ft  Fire  only 


Sequence  No.  (nnn) 


001,  002,  003 


V.  w*. 


PUBLIC 

FATALITIES 


HANDLING 

RELEASE 


SECTION  6 


ONSITE 

TRANSPORT 

RELEASE 


SECTION  8.1 


B\  FIG. 4-3 


C\  FIG. 4-4 


RELEASE 
TO  MOB 


MOB 

VENTILATION/ 

STRUCTURE 

FAILS 


PO INTERNAL 
EVENT  MOB 
RELEASE 


PO  EXTERNAL 
EVENT  MOB 
RELEASE 


SECTION  7.1  SECTION  7.2 


D\ FIG. 4-5  /E\  FIG. 4-6 


NOTE:  THIS  RISK  ANALYSIS  IDENTIFIES 

RELEASES  OF  SUFFICIENT  MAGNITUDE 
TO  CAUSE  ACUTE  PUBLIC  FATALITIES. 
LOWER  LEVEL  RELEASES  WOULD 
RESULT  IN  EXPOSURES,  BUT  ARE  NOT 
CONSIDERED. 


Fig.  4-1.  Master  logic  diagram  -  level  1  (public  impact) 
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MUNITION 

FAILURE 
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ACCIDENT 

MUNITION 

PUNCTURE 

HUMAN  ERROR/ 
EQUIPMENT  FAILli 

IRE  A. 

X 

OCCURRENCE 

EXTERNAL 

EVENTS 


NOT 

ANA  YZEO 


LPF.  MOB  OR  IN  PACKAGE 
{SEE  FIG  6  $ 

FOR  SEQUENCES) 


DROP 

VEHICLE 

PUNCTURE 

THERMAL 

CRUSH 

IMPACT 

IMPACT 

EVENTS 

COLLISIONS 

RUPTURE 

FAILURE 

RUPTURE 

DETONATION 

RUPTURE 

IN  STORAGE 
IGLOO,  OUT> 
DOORS,  LPF, 
MNI,  OR  MOB 
(SEE  FIGS. 

«  3  AND 
64  FOR 
SEQUENCES) 


IN  STORAGE 
IGLOO,  OUT-- 
DOORS,  LPF, 
OR  MOB 
(SEE  FIGS.  64 
AND  6  7  FOR 
SEQUENCES) 


FIRE 

INITIATION 


SUFFICIENT 

FLAMMABLE 

MATERIAL 


BURSTERED 

MUNITIONS 


NO  ACTIVE 
SUPPRESSION 

HUMAN  ERROR/ 
EQUIPMENT 

failure 


Mi 

yy.T^ 


•'■siy' 


Fig.  A-3.  Master  logic  diagram  -  levels  2  (release  pathway)  and  lower 
(barriers,  safety  functions,  and  initiators).  Part  B  - 
handling  release 
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failure  modes  of  the  munitions  (puncture,  detonation,  fire,  etc.)>  given 
that  the  event  occurs.  For  illustration,  some  sequences  analyzed  in 
Section  5  are  noted  under  the  initiating  event  boxes.  Table  4-2  summa¬ 
rizes  the  Initiating  event  families  for  storage  selected  for  analysis. 

Figure  4-3  shows  the  MLD  levels  2  and  lower  for  handling  opera¬ 
tions.  There  are  three  modes  of  release:  release  due  to  unpacking  of 
undetected  leakers,  inq>act  rupture  due  to  handling  accidents  (drops  and 
forklift  collisions),  and  forklift  tine  puncture.  Note  that  external 
events  are  not  Included  here;  external  events  for  storage  and  transport 
consider  the  entire  munitions  inventory  available  regardless  of  whether 
handling  operations  are  in  progress.  The  subsequent  level  initiating 
events  consider  the  location  idiere  the  event  occurs,  since  different 
barriers  for  release  are  Involved  (e.g.,  if  the  event  occurs  Indoors  or 
in  an  open  area) .  Table  4-3  summarizes  the  families  or  handling 
Initiating  events  selected  for  analysis. 

The  MLD  for  onsite  truck  transport  is  developed  in  Fig.  4-4.  A 
single  generic  mode  of  release  applies  to  this  phase,  involving  a 
vehicle  collision  or  overturn  coupled  ^/ith  potential  munitions  failure 
modes.  In  this  phase,  the  munitions  are  always  in  onsite  transport 
containers  or  overpacks,  and  failure  thresholds  may  differ  from  those 
for  bare  munitions.  Table  4-4  summarizes  the  initiating  event  families 
analyzed  for  onsite  transport. 

Figure  4-5  shows  the  MLD  level  2  and  subsequent  levels  for  internal 
events  during  plant  operations.  This  portion  of  the  MLD  was  constructed 
by  dividing  the  MDB  into  spatial  zones  and  examining  the  sources  for 
agent  release  in  each  zone.  The  zones  are  as  follows: 

1.  The  explosive  containment  vestibule  (ECV)  and  munitions 
corridor. 


TABLE  4-2 

INITIATING  EVENT  FAMILIES  FOR  STORAGE 


INTERNAL  EVENTS 

1.  Munition  drop 

a.  During  leaker  Isolation 

b.  Due  to  pallet  degradation 

2.  Forklift  tine  puncture  during  leaker  Isolation 
3>  Leak  between  Inspections 

EXTERNAL  EVENTS (a) 

1.  Fires  due  to 

a.  Spontaneous  Ignition  of  a  rocket 

b.  Flammable  materials  In  an  Igloo  or  warehouse 

c.  LPG  Ingress  Into  an  igloo  or  warehouse 

d.  Flammable  liquids  near  a  warehouse  at  NAAP 

2.  Meteorite  strikes  an  lgloo»  warehouse,  or  Interim  storage 
holding  area 

3.  Tornado  collapses  a  building  or  generates  a  missile 

4.  Aircraft  crash  due  to 

a.  Small  aircraft  (direct) 

b.  Large  aircraft  (direct) 

c.  Large  aircraft  (Indirect) 


5 .  Earthquake 

6.  Lightning  strikes  outdoor  storage 

(®)Note;  Floods  are  shown  in  Section  5  to  be  unimportant  Initiators 


TABLE  4-3 

INITIATING  EVENT  FAMILIES  FOR  HANDLING 

Drop  during  operations  at  the  processing  facility  of 

a.  Pallet  or  ONC  outdoors 

b.  Pallet  or  ONC  In  the  MDB 

c.  Single  munition  In  the  MDB 

Drop  during  operations  outside  the  facility  of  a 

a.  Pallet  or  ONC  In  a  storage  Igloo 

b.  Pallet  or  ONC  outdoors 

c.  Pallet  or  ONC  In  the  MHI 

d.  Pallet  In  the  LPF 

e.  Single  munition  In  the  LPF 

Forklift  tine  puncture  of  a 

a.  Bare  munition  In  a  storage  Igloo 

b.  Bare  munition  In  the  LPF 

c.  Bare  munition  In  the  MDB 

d.  ONC  outside  the  facility 

e.  ONC  at  the  facility 

Forklift  collision  at  the  processing  facility  for  a 

a.  ONC  outdoors 

b.  ONC  In  the  MDB 

Forklift  or  CHE  collision  outside  the  facility  for  a 

a.  Palletized  munition  outdoors 

b.  Palletized  munition  In  a  storage  Igloo 

c.  Palletized  munition  In  the  LPF 

d.  ONC  outdoors 

e.  ONC  In  an  MHI 

Failure  to  detect  a  leak  In  an  ONC 


TABLE  4-4 

INITIATING  EVENT  FAMILIES  FOR  ONSITE  TRUCK  TRANSPORT 

INTERNAL  EVENTS 

1.  Truck  collision  or  overturn  due  to  human  error  or  equipment 
failure 

a.  With  fire 

b.  Without  fire 

EXTERNAL  EVENTS 

1.  Aircraft  crash  into  a  truck 

a.  With  fire 

b.  Without  fire 

2.  Earthquake  causes  a  truck  collision  or  overturn 

a.  With  fire 

b.  Without  fire 

3«  Tornado  causes  a  truck  collision  or  overturn 

a.  With  fire 

b.  Without  fire 


2. 


The  munitions  processing  systems  within  the  explosive  con¬ 
tainment  room  (ECR)  and  the  munitions  processing  bay  (MPB). 


3.  The  buffer  storage  area  (BSA)*  particularly  punched  and 
drained  units  present  there. 

4.  The  TOX  tanks  and  associated  piping  systems. 

5.  The  furnaces  (MPF  and  DFS)  and  Incinerators  (LIC  and  DUN) 
and  associated  rooms. 

For  zones  1  and  2,  the  munitions  present  are  unpunched.  Thus, 
both  a  fall  or  other  upset  and  a  failure  of  the  munition  casing  must 
occur  for  an  agent  spill.  In  zone  3,  only  the  event  Is  needed  since  the 
munitions  are  punched.  Zone  A  refers  to  vessels  and  piping  containing 
liquid  agent;  failure  or  rupture  of  safety  grade  metallic  barriers  are 
required  for  spills.  Should  spills  occur  In  zones  1  through  A,  they 
would  drain  to  the  appropriate  sump.  Evaporation  from  the  floor  and 
sump  or  a  possible  burning  of  the  spill  could  result  In  a  release  to  the 
environment  If  the  MDB  ventilation  system  or  building  structure  falls. 
Zone  5  Includes  furnace  and  Incinerator  rooms  where  the  release  pathway 
Is  via  accidental  explosions. 

Figure  A-6  shows  the  corresponding  logic  diagram  for  release  due  to 
external  events  during  plant  operations.  Here,  the  conditional  failure 
of  the  MDB  structure  may  be  more  likely  or  certain,  given  the  cata¬ 
strophic  nature  of  the  external  events,  such  as  meteorite  strike  or  air¬ 
craft  crash.  Table  A-5  summarizes  the  initiating  event  families  for 
plant  operations. 
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TABLE  A-5 

INITIATING  EVENT  FAMILIES  FOR  PLANT  OPERATIONS 


INTERNAL  EVENTS 

1.  Accident  in  the  ECV  fells  e  nunltlon 

2.  Accident  In  the  ECR  or  MPB  fells  e  munition 

3.  Accident  In  the  BSA  ceuses  e  punched  munition  spill 

4.  Fellure  of  TOX  tenk  or  piping  ceuses  e  spill 

5.  Accident  essocleted  with  e  furnece  or  Inclneretor  which 
releeses  egent  vepor 

EXTERNAL  EVENTS 

1.  A  tornedo  genereted  missile  fells 

e.  MHI  munitions 

b.  UPA  munitions 

c.  TOX/BDS  piping  (outdoor  for  CAMDS) 

2.  A  meteorite  fells 

e.  MHI  munitions 

b.  UPA  munitions 

c.  TOX/BDS  piping 

d.  Agent  collection  tenks  In  TOX 

3.  A  direct  lerge  elrcrsft  cresh  fells 

e.  MHI  munitions 

b.  UPA  munitions 

c.  TOX/BDS  piping  (outdoor  for  CAMDS) 

d.  Agent  collection  tenke  in  TOX 

4.  An  Indirect  lerge  elrcreft  cresh  fells 

e.  MHI  munitions 

b.  UPA  munitions 

c.  Agent  collection  tenks  In  TOX 

5.  A  direct  smell  elrcreft  cresh  fells  TOX/BDS  piping  (outdoor 
for  CAMDS) 

6.  An  earthqueke  fells 

e.  MHI  munitions 

b.  UPA  munitions 

c.  Agent  collection  tenks  In  TOX 

7.  A  truck  accident  falls 

a.  TOX/BDS  piping  (outdoor  for  CAMDS) 


4.2.  INITIATING  EVENT  FREQUENCIES 


4.2.1.  External  Events 


This  section  presents  the  site-specific  frequencies  of  external 
initiating  events  considered  in  this  study.  Table  4-6  summarizes  the 
results  for  occurrences  at  each  of  the  eight  CONUS  sites.  Table  4-7 
presents  the  nonslte-specific  occurrence  frequencies.  The  bases  for 
these  results  are  discussed  in  the  following  subsections. 

4.2. 1.1.  Earthquakes .  The  frequency  at  which  a  major  earthquake 
occurs  at  a  specific  site  varies  significantly  throughout  the  United 
States  (Table  4-8).  In  an  atteitq>t  to  quantify  the  seismic  risk  associ¬ 
ated  with  a  particular  site,  the  Seismology  Committee  of  the  Structural 
Engineers  Association  of  California  (SEAOC)  has  divided  the  United 
States  into  five  seismic  zones.  Maps  of  these  seismic  zones  are  pre¬ 
sented  in  the  Uniform  Building  Code  (Ref.  4-11)  and  in  Army  TM  5-809-10 
(Ref.  4-12).  Figure  4-7  presents  the  seismic  zone  map  from  TM  5-809-10 
and  Table  4-8  presents  the  seismic  zones  indicated  for  each  of  the 
storage  sites.  The  probability  of  seismic  damage  in  each  of  the  zones 
is  defined  in  Ref.  4-11  as  follows: 

Zone  0  -  None  Zone  3  -  Major 

Zone  1  -  Minor  Zone  4  -  Great 

Zone  2  -  Moderate 

The  determination  of  a  seismic  zone  on  a  site  is  based  on  the  his¬ 
tory  of  past  earthquakes  and  the  proximity  of  known  faults.  Appendix  D 
presents  listings  of  the  earthquakes  that  have  occurred  in  the  vicinity 
of  each  of  the  storage  sites.  The  magnitudes  of  the  earthquakes  are 
expressed  as  Modified  Mercalli  Intensities  (MMI).  Table  4-8  presents  a 
sunnnary  of  the  maximum  earthquake  occurring  in  the  vicinity  of  each  of 
the  storage  sites.  The  maximum  earthquake  recorded  at  any  of  the  eight 
storage  sites  is  an  MMI  VIII. 
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TABLE  A-7 

EXTERNAL  EVENT  FREQUENCIES  FOR  SPECIAL  CASES 


Event 

Frequency 

1. 

Fires 

a. 

Spontaneous  rocket  ignition 

(a) 

b. 

Flammable  material  (inside) 

(b) 

c. 

LNPG  ingress 

(c) 

d. 

Flammable  liquids  nearby 

(d) 

2. 

Marine  transport  events 

a. 

Heavy  weather  damage  to 

3 

X 

10-9/trip 

lighters 

b. 

Heavy  weather  damage  to  LASH 

3 

X 

lO-9/trip 

c. 

On-board  fire  (LASH) 

3 

X 

10-9/trlp 

3. 

Aircraft  events 

a. 

On-board  fire,  C-141 

7.6  X  10-9 

accidents /flight-mile 

b. 

On-board  fire,  C-5 

3.2  X  10-® 

accidents /flight-mile 

(a)Negllgibly  low  probability  based  on  AMSAA  report. 


Insufficient  flammable  material  in  storage  areas;  analyzed  by 
plant  area  for  the  demil  facility. 

(^)Negligibly  low  rate  of  ingress  relative  to  that  needed  for 
flammability. 

(‘^)Applies  only  to  NAAP;  quantity  of  flammable  material  determined  to 
be  Insufficient  to  threaten  munitions. 


TABLE  4-8 

MAXIMUM  MODIFIED  MERCALLI  INTENSITIES  (MMI)  IN  THE  VICINITY  OF  EACH  SITE 


Seismic 

No.  of 

Site 

Zone 

MMI 

Occurrences 

Aberdeen  Proving  Ground  (APG) 

1 

VII 

1 

Pine  Bluff  Arsenal  (PBA) 

1 

VI 

3 

Pueblo  Depot  Activity  (PUDA) 

1 

VI 

1 

Uraatilla  Depot  Activity  (UMDA) 

1 

VII 

1 

Anniston  Army  Depot  (ANAD) 

2 

VII 

1 

Newport  Array  Ammunition  Plant  (NAAP) 

2 

VII 

1 

Lexington-Blue  Grass  Army  Depot  (LEAD) 

2 

VII 

1 

Tooele  Army  Depot  (TEAD) 

3 

VIII 

2 

Currently  the  Applied  Technology  Council,  idilch  Is  associated 
with  the  SEAOC,  Is  developing  new  seismic  regulations  for  buildings 
(Ref.  A-13).  Vftien  this  work  Is  completed.  It  Is  expected  to  be  the 
basis  for  future  federal,  state,  and  local  building  codes.  Fart  of  this 
work  was  the  development  of  a  seismic  risk  map  that  divides  the  United 
States  Into  seven  seismic  map  areas  similar  to  the  five  seismic  zones 
used  In  Refs.  4-11  and  4-12.  The  seismic  risk  Is  approximately  constant 
throughout  a  seismic  map  area. 

Figure  4-8  (from  Ref.  4-13)  presents  a  set  of  curves  that  can  be 
used  to  estimate  the  probabilities  of  earthquakes  of  various  g-levels 
occurring  within  a  particular  seismic  map  area.  The  dashed  portions  of 
the  curves  Indicate  possible  extrapolations  to  larger  and  smaller  annual 
probabilities. 

Table  4-9  Identifies  the  seismic  map  areas  for  each  of  the  sites 
(Fig.  4-7)  and  tabulates  the  annual  frequencies  of  earthquakes  of  vari¬ 
ous  g-levels  being  exceeded  at  the  storage  sites.  The  data  In  Table  4-9 
were  obtained  from  Fig.  4-8.  Straight  line,  logarithmic  extrapolation 
was  used  to  extrapolate  to  accelerations  beyond  the  curves  shown  In 
Fig.  4-8.  This  method  of  extrapolation  Is  believed  to  produce  conser¬ 
vative  estimates  of  the  probabilities. 

4.2. 1.2.  Wind  Hazards.  Methods  for  estimating  the  frequency  and  Inten¬ 
sity  of  extreme  winds  can  be  found  in  ANSI/ANS-2. 3-1983  (Ref.  4-14). 

The  discussion  which  follows  is  largely  based  on  the  referenced  national 
standard. 

4.2. 1.2.1.  Tornadoes.  A  tornado  Is  a  violently  rotating  column  of  air 
whose  circulation  reaches  the  ground.  The  velocity  of  tornadic  winds 
can  exceed  300  mph.  The  path  of  a  tornado  can  be  more  than  a  mile  in 
width,  but  generally  ranges  from  0.125  to  0.75  mile  wide.  The  path 
width  Is  defined  as  the  tornado  diameter  corresponding  to  a  75-mph  wind 
velocity.  The  path  of  a  tornado  Is  seldom  more  than  10  miles  long. 


although  extreme  cases  are  on  record  ^ere  the  storm  path  extended  more 
than  200  miles. 


Meteorological  and  topographic  conditions,  uhlch  vary  significantly 
from  site  to  site,  Influence  the  frequency  of  occurrence  and  Intensity 
of  tornadoes.  Reference  4-14  presents  three  regionalized  maps  of  tor- 
nadlc  wind  speeds  corresponding  to  return  frequencies  of  1.0  x  10'^, 

1.0  X  10~6,  and  1.0  x  10~^  per  year.  These  maps  (Figs.  4-9  through 
4-11)  are  expected  to  bound  the  Intensities  and  return  probabilities  at 
the  various  sites  (Ref.  4-15).  A  tabulation  of  maximum  tornado  wind 
speed  and  return  frequency  for  each  of  the  storage  sites  based  on  these 
figures  Is  presented  In  Table  4-10. 

4.2. 1.2.2.  Tornado-Generated  Missiles.  One  of  the  characteristics  of  a 
tornado  Is  Its  capability  to  generate  missiles  from  objects  lying  within 
the  strike  area  and  from  nearby-  structural  debris.  The  selection  of 
tornado-generated  missiles  Is  dependent  on  the  Intensity  of  the  tornado, 
the  number  of  potential  missiles  present,  their  position  relative  to  the 
tornado  path,  and  the  physical  properties  of  the  missiles.  Reference 
4-16  presents  a  spectrum  of  actual  wind-generated  missiles.  Character¬ 
istics  of  these  missiles  are  listed  In  Table  4-11,  and  expected  wind- 
borne  missile  velocities  are  listed  In  Table  4-12. 

4.2. 1.2.3.  Other  Extreme  Winds.  The  approach  used  for  the  determina¬ 
tion  of  extreme  wind  speed  (other  than  tornado)  Including  hurricane 
winds  Is  the  method  suggested  by  Science  Applications  International  Cor¬ 
poration  (SAIC).  SAIC  (Ref.  4-17)  suggested  the  use  of  a  basic  wind 
speed  as  defined  In  Ref.  4-18.  A  frequency  of  occurrence  of  2.0  x  10“2 
per  year  Is  associated  with  a  basic  wind  speed  of  70  mph.  SAIC  con¬ 
cluded  that  the  basic  wind  speed  was  applicable  to  all  of  the  sites  that 
store  M55  rockets.  Lacking  site-specific  meteorological  data.  It  Is 
assumed  that  the  basic  wind  speed  Is  applicable  to  the  other  sites  as 
well. 


4-25 


Fig.  4-11.  Tornadic  winds  corresponding  to  a  probability  of  l.OE-5  per 
year 


TABLE  4-10 

TORNADO  WIND  SPEEDS  AND  PROBABILITY  OF  RECURRENCE 
FOR  CHEMICAL  STORAGE  SITES 


Probability  of  Occurrence  Per  Year 
[Wind  Speed  (mph)] 


Size 

l.OE-5 

l.OE-6 

l.OE-7 

ANAD  (Anniston,  Ala. ) 

200 

260 

320 

LEAD  (Lexington,  Ky. ) 

200 

260 

320 

UMDA  (Umatilla,  Oreg.) 

100 

140 

180 

PBA  (Pine  Bluff,  Ark.) 

200 

260 

320 

TEAD  (Tooele,  Utah) 

100 

140 

180 

PUDA  (Pueblo,  Colo.) 

150 

200 

250 

NAAP  (Newport,  Ind.) 

200 

260 

320 

APG  (Aberdeen,  Md.) 

150 

200 

250 

TABLE  4-11 

WIND-GENERATED  MISSILE  PARAMETERS (») 


Missile 


Timber  plank 
4  In.  X  12  In.  x 
12  ft 


Weight 

(lb) 


Projected 

Area 

(ft2) 


Cross-Sectional 

Area 

(ft2) 


In  order  to  estimate  the  frequency  of  recurrence  of  winds  of  veloc¬ 
ity  greater  than  the  basic  wind  speed,  but  less  than  the  tornado  wind 
speed,  the  following  approach  was  taken.  The  tornado  strength  and  fre¬ 
quency  data,  and  the  basic  wind  strength  and  frequency  data  were  plotted 
on  a  scale  of  log  probability  versus  wind  strength.  The  results  are 
shown  In  Figs.  4-12  through  4-14  for  the  three  tornado  regions  of  the 
United  States  as  given  In  Ref.  4-14.  A  conservative  approach  to  Inter¬ 
polating  between  the  available  data  points  Is  the  bilinear  approximation 
shown  by  the  solid  lines  In  the  figures.  With  these  figures,  the  proba¬ 
bility  of  a  given  wind  velocity  occurring  at  any  of  the  chemical  storage 
sites  can  be  estimated. 

4.2. 1.3.  Aircraft  Operations.  Much  of  the  data  In  this  section  were 
taken  from  the  SAIC  report  (Ref.  1-9). 

There  are  three  major  concerns  In  assessing  potential  hazards  due 
to  aircraft  operations: 

1.  Proximity  of  aircraft  operations  to  munitions  areas. 

2.  The  frequency  of  aircraft  flights. 

3.  The  characteristics  of  the  aircraft  traffic. 

The  proximity  of  aircraft  operations  to  munitions  activities  Is  an 
Important  consideration  In  that  approximately  50Z  of  aircraft  accidents 
which  result  In  fatalities  or  destroy  aircraft  occur  within  5  miles  of 
airports  (Ref.  1-9).  Also,  the  close  proximity  of  flight  paths  to  muni¬ 
tions  activities  Increases  the  likelihood  of  these  areas  receiving  fall¬ 
ing  debris  from  aircraft  accidents.  The  frequency  of  flight  activity 
Increases  the  possibility  of  damage  to  munitions  by  Increasing  the  over¬ 
all  likelihood  of  an  aircraft  accident. 


RETURN  PERIOD  (YEARS) 


PROBABILITY  OF  EXCEEDING  THRESHOLD 


Per  the  reconmendatlons  of  NUREG-0800  (Ref.  19),  the  probability  of 
an  aircraft  crash  can  be  considered  small  If  the  distance  to  the  site 
meets  the  following  requirements: 

1.  The  plant-to-alrport  distance  (D)  Is  between  5  and  10  statute 
miles,  and  the  projected  annual  number  of  operations  Is  less 
than  500  D^,  or  the  plant-to-alrport  distance  Is  greater  than 
10  statute  miles,  and  the  projected  annual  number  of  opera¬ 
tions  Is  less  than  1000  D^. 

2.  The  plant  Is  at  least  5  statute  miles  from  the  edge  of  mili¬ 
tary  training  routes.  Including  low-level  training  routes, 
except  those  associated  with  a  usage  greater  than  1000  flights 
per  year,  or  where  activities  may  create  an  unusual  stress 
situation. 

3.  The  plant  Is  at  least  2  statute  miles  beyond  the  nearest  edge 
of  a  federal  airway,  holding  pattern,  or  approach  pattern. 

The  characteristics  of  an  aircraft,  such  as  its  weight,  number  of 
engines,  etc.,  are  Important  in  determining  the  energy  of  potential  mis¬ 
siles  generated  In  an  aircraft  accident,  and  depending  on  the  structure 
they  hit,  the  magnitude  of  the  damage  they  may  cause. 

The  frequency  of  an  aircraft  crashing  while  In  an  airway  can  be 
computed  as  follows  (Ref.  4-19): 

PpA  =  C  X  N  X  A/W  ,  (4-1) 

where  C  =  Inflight  crash  rate  per  mile  for  aircraft  using  airway, 

W  *  width  of  airway  (plus  twice  the  distance  from  the  airway  edge 
to  the  site  when  the  site  Is  outside  the  airway)  in  miles, 

A  s  effective  area  of  facility  In  square  miles, 

N  -  number  of  flights  per  year  along  the  airway. 


For  commercial  aircraft,  a  value  for  C  of  1.0  x  10“^®  has  been  used 
(Ref.  4-19).  For  military  aircraft,  C  Is  estimated  to  be  five  times 
the  value  for  commercial  flights  (Ref.  4-13).  For  general  aviation, 

C  was  estimated  to  be  the  same  as  for  military  aircraft. 

The  frequency  of  an  aircraft  crashing  in  the  vicinity  of  an  airport 
or  heliport  can  be  computed  as  follows  (Ref.  4-19): 


fA  -  E  E  Cj  BlJ  AJ 


(4-2) 


where  L  =  number  of  flight  trajectories  affecting  the  target, 

M  =  number  of  different  flights  using  the  airport, 

Cj  =  probability  per  square  mile  of  a  crash  per  aircraft  movement 
for  aircraft, 

N^j  =  number  per  year  of  movements  by  the  aircraft, 

Aj  =  effective  target  area  in  square  miles  for  the  j'-^  aircraft. 

The  values  for  Cj  which  were  used  in  the  analysis  are  listed  in 
Table  4-13.  The  total  crash  probability  is  the  sum  of  and  P^.  The 
methodology  for  selecting  these  values  is  discussed  in  Appendix  C. 


The  Federal  Aviation  Administration  (FAA)  does  not  monitor  the  num¬ 
ber  of  certain  types  of  aircraft  which  fly  the  high  and  low  altitude 
airways.  Consequently,  the  air  traffic  was  estimated.  Since  air  traf¬ 
fic  is  not  the  same  on  all  airways,  the  airways  are  divided  into  five 
categories  with  regard  to  air  traffic:  very  low,  low,  medium,  high,  and 
very  high.  Table  4-14  presents  estimates  of  the  air  traffic  on  each  of 
these  airways.  Each  airway  was  assigned  to  one  of  these  categories 
based  on  the  traffic  expected  between  the  cities  that  the  airway  con¬ 
nects.  If  there  are  no  low  altitude  airways  near  a  site,  it  is  assumed 
that  the  air  traffic  over  the  site  is  at  least  equal  to  that  for  a  very 
low  air  traffic  airway. 


*S 


TSSf 

|QK\ 


Distance  From 

Probability  (x  10^)  of  a  Fatal  Crash  per  Square 

Mile  per  Aircraft  Movement 

End  of  Runway 

Commercial 

General  Aviation 

Military 

Helicopters 

0-1 

16.7 

84 

7.0 

168 

1-2 

4.0 

15 

1.7 

30 

2-3 

0.96 

6.2 

0.72 

12 

3-4 

0.68 

3.8 

0.37 

7.6 

4-5 

0.27 

1.2 

0.30 

2.4 

5-6 

0.14 

0.70 

0.14 

1.4 

6-7 

0.14 

0.70 

0.14 

1.4 

7-8 

0.14 

0.70 

0.14 

1.4 

8-9 

0.14 

0.70 

0.14 

1.4 

9-10 

0.12 

0.60 

0.12 

1.2 

V' 


-V  -V  -'.  .%  -■»  ->  .>.V  - 
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TABLE  4-14 

ASSUMED  DISTRIBUTION  OF  AIR  TRAFFIC (») 


Aircraft 

Very 

Low 

Low 

Medium 

High 

Very 

High 

High  Altitude  Jet  Routes 

Large  commercial 

1,000 

2,000 

5,000 

10,000 

20,000 

Large  military 

500 

1,000 

2,500 

5,000 

10,000 

Large  general  aviation 

500 

1,000 

2,500 

5,000 

10,000 

Total 

2,000 

4,000 

10,000 

20,000 

40,000 

Low  Altitude  Airways 

Large  commercial 

400 

800 

2,000 

4,000 

8,000 

Large  military 

240 

480 

1,200 

2,400 

4,800 

Large  general  aviation 

400 

800 

2,000 

4,000 

8,000 

Small  general  aviation 

6,960 

13,920 

34,800 

69,600 

139,200 

Total 

8,000 

16,000 

40,000 

80,000 

160,000 

(»)Flights  per  year. 

(^)The  number  of  small  commercial  and  small  military  flights  Is 
assumed  to  be  small  compared  to  other  types  of  flights. 


Appendix  C  presents  tables  which  summarize  the  input  data  that 
were  used  to  calculate  the  annual  frequencies  of  both  small  and  large 
aircraft  crashes  at  each  of  the  eight  sites.  The  frequencies  were  com¬ 
puted  using  the  equations  given  above.  The  annual  frequencies  for  all 
the  sites  and  for  large  and  small  aircraft  and  helicopters  are  summa¬ 
rized  in  Table  4-15. 

A  major  source  of  air  crashes  is  the  proximity  of  airports  and 
heliports.  This  is  of  particular  concern  at  APG,  PBA,  and  FUDA.  The 
air  traffic  for  the  APG  analysis  was  supplied  by  PEO-PM  Cml  Demll 
(Ref.  4-14).  The  helicopter  air  traffic  at  PBA  was  estimated  by  SAIC 
(Ref.  4-13).  The  air  traffic  at  PUDA  was  based  on  data  collected  at 
Pueblo  Memorial  Airport  and  communicated  to  GA  by  telephone.  The 
helicopter  traffic  at  TEAD  is  light  and  was  assumed  to  be  15  flights  per 
month. 

The  annual  frequency  of  a  crash  into  a  specific  facility  is  com¬ 
puted  by  multiplying  the  appropriate  frequency  taken  from  Table  4-15  by 
the  effective  target  area  of  the  facility  (see  Appendix  C). 

4.2. 1.4.  Meteorites .  The  frequency  of  meteorite  strikes  for  meteorites 
1.0  lb  or  greater  is  4.3  x  10“^3/ft^  (Ref.  4-20).  For  small  meteorites 
(a  ton  or  less),  stone  meteorites  are  approximately  ten  times  more  com¬ 
mon  than  iron  meteorites  (Ref.  4-21).  However,  iron  meteorites  are  more 
dense  and  tend  to  have  higher  Impact  velocities,  and  consequently,  rep¬ 
resent  a  significant  portion  of  the  total  meteorites  that  can  rupture 
munitions.  Table  4-16  shows  the  size  distribution  of  striking  meteor¬ 
ites  for  both  iron  and  stone  meteorites.  The  table  was  compiled  from 
the  data  presented  in  Refs.  4-20  and  4-21. 

4.2.2.  Electromagnetic  Radiation 


Electromagnetic  (E-M)  radiation,  either  as  a  continuous  source  of 
energy  or  a  short  duration  but  higher  energy  pulse  (EMP),  has  been  con 
sldered  as  a  potential  hazard  for  control  systems,  sensitive  explosive 


TABLE  4-15 

SUMMARY  OF  AIRCRAFT  CRASH  PROBABILITIES 
(Crashes /Squar«-Mlle/Year) 


Large  Small 

Site  Aircraft  Aircraft  Helicopters 


Rail  and  Marine  Options 


AFG 

5.3 

X 

10-7 

1.1 

X 

o 

1 

6.7  X  10-3 

ANAD 

7.9 

X 

o 

1 

1.2 

X 

10-5 

N/A(a) 

LBAD 

4.5 

X 

10-6 

1.8 

X 

1 

o 

N/A 

NAAP 

4.6 

X 

10-6 

2.3 

X 

o 

1 

N/A 

PBA 

1.5 

X 

10-6 

1.8 

X 

1 

o 

1.1  X  10-^ 

PUDA 

5.9 

X 

10-5 

1.0 

X 

o 

1 

N/A 

TEAD 

3.6 

X 

10-7 

3.5 

X 

1 

o 

1.1  X  10-5 

UMDA 

1.5 

X 

o 

I 

1.2 

X 

10-5 

N/A 

Air  Option 


APG 

5.6 

X 

o 

1 

1.1 

X 

o 

1 

6.7  X 

1 

o 

LBAO 

3.0 

X 

10-5 

1.8 

X 

10-7 

N/A 

TEAO 

3.1 

X 

o 

1 

3.5 

X 

o 

1 

1.1  X 

1 

o 

TABLE  4-16 

SIZE  DISTRIBUTION  OF  METEORITES  WHICH  ARE  1.0  lb  OR  LARGER(a) 


Weight 

Greater 

Than 

(lb) 

Stone 

Meteorites (^) 

Iron 

Meteorites  ('*) 

All 

Meteorites (^) 

1 

0.9 

0.1 

1.0 

2 

0.3 

3  X 

10-2 

0.3 

20 

0.1 

1  X 

10-2 

0.1 

200 

3  X 

10-2 

3  X 

1 

o 

3  X 

10-2 

2,000 

2  X 

10-3 

2  X 

io-« 

2  X 

o 

1 

20,000 

3  X 

io-« 

3  X 

10-5 

3  X 

1 

o 

(^)Oata  con^lled  from  Refs.  4-20  and  4-21. 

(^)Fractlon  of  total  number  of  meteorites  1.0  lb  or  greater. 
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materials,  and  various  munition  components.  The  EMP  field  Is  a  short 
pulse  which  might  contain  higher  energies  due  to  some  uncontrollable 
phenomenon.  Solid-state  electrical  circuits  associated  with  systems 
idilch  are  national  security  sensitive  are  designed  for  protection  from 
EMP  produced  electrical  energies  which  could  result  from  atmospheric 
nuclear  blasts.  These  protection  systems  generally  are  designed  as  a 
Faraday's  cage  or  have  been  designed  to  Include  ''sacrificial*'  (l.e., 
expendable}  electrical  components.  However,  since  nuclear  warfare  Is 
out  of  this  study’s  scope,  the  potential  for  these  levels  of  energies  to 
exist  have  been  qualitatively  screened  out  as  not  being  credible  as 
potential  hazards  to  control  systems.  All  munitions  with  the  exception 
of  MSS  rockets  are  Inherently  enclosed  In  metal  that  acts  as  a  Faraday’s 
cage  for  protecting  the  munition’s  Interrals  for  normal  and  stray  E-M 
fields.  A  Faraday’s  cage  would  provide  a  conducting  shield  for  Induced 
electrical  energy  which  results  from  E-M  fields  passing  through  It. 

This  E-M  phenomenon  Is  the  basic  physics  principle,  represented  by  the 
well-known  Maxwell’s  equations,  which  enables  an  electrical  generator  to 
change  mechanical  energy  to  electrical  energy  by  rotating  a  conducting 
system  through  a  magnetic  field.  Therefore,  with  the  exception  of  fur¬ 
ther  examination  of  the  possible  effects  of  E-M  on  M55  rockets,  normal 
or  stray  E-M  fields  have  been  eliminated  as  a  potential  Initiating  event 
In  this  hazard  analysis. 

MSS  rockets,  and  In  particular  the  rocket  motors  and  Ignition  sys¬ 
tems,  have  been  evaluated  for  their  susceptibility  to  E-M  energies  or 
short  duration  pulses  [EMPs  In  an  earlier  study  (Ref.  4-22)].  MSS 
rockets  warranted  special  Investigation  because  they  contain  their  own 
motors  and  firing  systems  (Igniters),  and  because  of  propellant  Insta¬ 
bility  which  could  be  Increasing  as  the  rockets  age.  The  SAX  MSS  study 
(Ref.  4-22)  further  Investigated  the  rocket’s  Internals  and  concluded 
that  all  the  critical  components  were  contained  within  metallic 
Faraday’s  cage  type  of  shields.  This  study  screened  out  the  "rare" 
event  of  a  simultaneous  failure  of  the  Igniter’s  shunt,  which  prevents 
electrical  energies  from  reaching  the  motor,  and  the  existence  of  an 


i 
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Incident  delivering  sufficient  electrical  energy  to  this  M55  rocket. 
However,  if  any  M55  rockets  have  a  nonworking  igniter  shunt,  then  it  is 
not  really  a  case  of  two  simultaneous  occurring  events.  There  are 
guidelines  for  naval  vessels  (Ref.  4-23)  for  maximum  radar  and  communi¬ 
cation  energies  for  ensuring  that  E-M  hazards  are  controlled.  Figures 
4-15  and  4-16  are  from  NAVSEA  HERO  document  (Ref.  4-23)  and  represent 
the  safe  field  strength  and  power  densities  for  fully  assembled  ord¬ 
nance.  These  curves  are  based  on  experimental  results  of  HERO  tests. 

The  boundaries  were  established  by  the  most  susceptible  ordnance  items. 
We  recommend  that  further  effort  be  expended  in  determining  whether  or 
not  the  most  sensitive  ordnance  onboard  the  naval  vessels  include  items 
similar  to  the  M55  rockets  and  in  determining  what  the  field  strength 
and  power  density  boundaries  mean  terms  of  radio  or  radar  transmission 
energies  which  can  be  more  easily  understood  and  enforced. 

In  summary,  E-M  and  EMP  have  been  screened  out  as  potential  sources 
for  plant  operations’  initiating  events;  however,  further  analysis  and 
study  are  recommended  to  administratively  control  the  safe  demilitariza¬ 
tion  of  munitions  well  within  the  safe  E-M  boundaries. 

4.2.3.  Internal  Events 

Table  4-17  summarizes  the  Internal  initiating  events  for  the  onsite 
disposal  option.  Also  summarized  in  the  table  are  the  event  occurrence 
frequencies.  The  bases  for  these  frequencies  are  discussed  in  the  indi¬ 
vidual  phase  sections  dealing  with  the  event  tree  analysis.  Sections  5 
through  8,  and  are  not  repeated  here. 


TABLE  4-17 

LIST  OF  INTERNAL  INITIATING  EVENTS  AND  FREQUENCIES 


Frequency 

Event 

Clothing  Level 
A  C 

F 

STORAGE /HANDLING  EVENTS  (per  operation) 

1. 

Munition  drop  from  CHE  (bulk 
containers) 

3  X  10-5  1.5  X  10-6 

3  X 

10-6 

2. 

Munition  drop  from  forklift 
(pallets  or  ST  In  overpacks) 

3  X  10-^  1.5  X  10-5 

3  X 

10-5 

3. 

Munition  drop  from  hand  (single 
units) 

6  X  10-^  3  X  10-^ 

6  X 

10-5 

4. 

Forklift  tine  accident 

1  X  10-^  5  X  10-5 

1  X 

10-5 

5, 

Forklift  or  CHE  collision 

4.3  X  10-6  4.3  X  10-6 

4.3 

X  10-6 

6. 

Leak  between  inspections 
(stored  pallets) 

Munition  dependent 

7. 

Leak  in  ONC  or  OFCj  failure  to 
detect 

Munition  dependent 

Events 

Frequency 

TRANSPORT  EVENTS 

1. 

Truck  collision  or  overturn  in 
convoy 

1.4  X  IQ-^/road  mile 

2. 

Truck  fire  in  convoy 

2.8  X  10-®/road  mile 

3. 

Train  derailment  (human  error 
or  equipment  failure) 

5.5  X  10-6/road  mile 

4. 

Aircraft  crash  at  APG 

4.2  X  10-^/yr 

5. 

Aircraft  crash  at  LBAD 

1.6  X  10-®/yr 

6. 

Aircraft  crash  at  TEAD 

9.1  X  10-10/yr 
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TABLE  4-17  (Continued) 


Events 


Frequency 


7.  Barge  collision 

8.  Barge  ramming 

9.  Barge  grounding 

10.  LASH  collision,  Inland 
LASH  collision,  coastal 
LASH  collision,  sea 

11.  LASH  ramming.  Inland 
LASH  ramming,  coastal 
LASH  ramming,  sea 

12.  LASH  grounding.  Inland 
LASH  grounding,  coastal 
LASH  grounding,  sea 


5.0  X  10~^/ shipment 

4.1  X  10~^/shlpment 

8.6  X  10~^/ shipment 

1.8  X  10~^/ shipment 

8.1  X  10~^/shlpment 
1.8  X  10~^/shlpment 

2.5  X  10'^ /shipment 

1.7  X  10~^/ shipment 

1.3  X  10~^/shlpment 

2.3  X  10~^/ shipment 

6.6  X  10~^/shlpment 
5.5  X  10~^/shlpment 


PLANT  OPERATIONS  EVENTS 

1.  Munition  spill  in  ECV  Kt  4  x  lO'^/yr 

Ri  3  X  lO'^/yr 
M:  4  X  10"^/yr 
Qj  3  X  10“7/yr 
Cl  1  X  10-8/yr 
P:  6  X  10'7/yr 

2.  Munltlon(s)  spill  in  ECR  IM:  10~^/yr 

2M:  10-2/yr 

IQ:  10-1/yr 
2Q:  10-2/yr 

IR:  10-2/yr 
2R:  10-3/yr 


3. 

Munition  detonates  In  ECR 

M:  4  X  10"^/yr 

R:  1  X  10-2/yr 

others:  2  x  lO'^/yr 

4. 

Munltlon(s}  spill  In  MPB 

K:  4  x  10-5/yr 

Q:  3  X  10'3/yr 

2Q:  3  X  10-^/yr 

5. 

Ton  container  spill  In  BSA 

4  X  lO^-S/yr 

6. 

Small  TOX  spill 

1  X  10-3/yr 

TABLE  4-17  (Continued) 


Events  Frequency 


7.  Large  TOZ  spill 

1  X 

10"3/yr 

8.  Unpunehed  bulk  item  £ed  to  MPF 

KHt 

1  X  10-9/yr 

KVt 

6  X  10"l/vr 

9.2  X  10-10/yr 

KGt 

Bt 

6.4  X  10-9/yr 

St 

7.2  X  10-10/yr 
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5.  SCENARIO  LOGIC  MODELS  FOR  STORAGE 


5.1.  SEQUENCF  LIST  AND  EVENT  TREES 

The  accident  sequences  involving  the  interim  storage  of  chemical 
munitions  were  categorized  as  follows: 

1.  External  event-induced  agent  releases  (e.g.,  earthquakes, 
aircraft  crashes,  etc.). 

2.  Releases  due  to  leakage  of  munitions  while  in  storage. 

3.  Releases  from  accidents  that  could  occur  during  the  isolation 
of  leaking  munitions  while  in  storage. 

For  the  onsite  disposal  option,  interim  storage  refers  to  the 
storage  of  munitions  at  their  original  location  (in  igloos,  warehouses, 
or  open  yards)  before  transfer  to  the  demilitarization  facility. 

Table  5-1  presents  the  list  of  accident  sequences  identified  and 
evaluated  for  the  onsite  disposal  option.  Event  tree  models  are  shown 
in  Figs.  5-1  through  5-5.  They  will  be  discussed  in  the  following 
sections  by  Initiating  event  category.  The  following  notation  is  used 
in  the  event  trees: 

NR  =  no  release  of  agent 

F  =  sequence  screened  based  on  low  frequency  criterion 
C  =  sequence  screened  based  on  low  release  criteria 
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TABLE  5-1 

MASTER  LIST  OF  STORAGE  ACCIDENTS 


Event  ID 


Description 


Munition  develops  a  leak  between  Inspections. 

Munition  punctured  by  forklift  tine  during  leaker-handling 
activities. 

Spontaneous  Ignition  of  rocket  during  storage. (^) 

Large  aircraft  direct  crash  onto  storage  area;  fire  not 
contained  In  30  min.  (Note:  Assume  detonation  occurs  If 
burstered  munitions  hit;  fire  Involving  burstered  munitions 
not  contained  at  all.) 

Large  aircraft  Indirect  crash  onto  storage  area;  fire  not 
contained  In  30  min.  (See  note  In  SLA.) 

Tornado-generated  missiles  strike  the  storage  magazine, 
warehouse,  or  open  storage  area;  munitions  breached  (no 
detonation) . 

Severe  earthquake  breaches  the  munitions  In  storage  Igloos;  no 
detonations . 


Meteorite  strikes  the  storage  area;  fire  occurs;  munitions 
breached  (If  burstered,  detonation  also  occurs). 

Munition  dropped  during  leaker  Isolation  operation;  munition 
punctured. 

Storage  Igloo  or  warehouse  fire  from  Internal  sources. 

Munitions  are  dropped  due  to  pallet  degradation. 

Liquid  propane  gas  (LPG)  Infiltrates  Igloo/bulldlng. 

Flammable  liquids  stored  In  nearby  facilities  explode;  fire 
propagates  to  munition  warehouse  (applies  to  NAAP).(^) 

Tornado- Induced  building  collapse  leads  to  breaching/ 
detonation  of  munitions. (®) 

Small  aircraft  direct  crash  onto  warehouse  or  open  storage 
yard;  fire  occurs;  not  contained  In  30  min. 


(®)Screened  out  for  reasons  stated  In  Table  5-2. 


Event  ID 


SL261 


SL262 


S1263 


SL26A 


SL265 


SL271 


SL272 


TABLE  5-1  (Continued) 


Description 


Large  aircraft  direct  cradh;  no  fire;  detonation  (if 
burstered) . 

Large  aircraft  direct  crash;  fire  contained  within  30  min 
(applies  to  nonburstered  munitions  only). 

Small  aircraft  direct  crash  onto  warehouse  or  open  storage 
yard;  no  fire. 

Small  aircraft  direct  crash  onto  warehouse  or  open  storage 
yard;  fire  contained  in  30  adn. 

Large  aircraft  indirect  crash  onto  storage  area;  no  fire. 

Large  aircraft  indirect  crash  onto  storage  area;  fire  con¬ 
tained  in  30  min. 

Severe  earthquake  leads  to  munition  detonation. 

Tornado-generated  missiles  strike  the  storage  igloo  and  leads 
to  munition  detonation. 

Lightning  strikes  ton  containers  stored  outdoors. 

Munition  dropped  during  leaker  isolation;  munition  detonates. 

Earthquake  occurs;  NAAP  warehouse  is  intact;  no  ton  containers 
damaged;  fire  occurs. 

Earthquake  occurs;  NAAP  warehouse  is  intact;  ton  container 
damaged;  no  fire. 

Earthquake  occurs;  NAAP  warehouse  is  intact;  ton  container 
damaged;  fire  occurs. 

Earthquake  occurs;  NAAP  warehouse  is  damaged;  ton  containers 
damaged;  no  fire. 

Earthquake  occurs;  NAAP  warehouse  is  damaged;  ton  containers 
damaged;  fire  occurs. 

Earthquake  occurs;  TEAD  warehouses  Intact;  munitions  intact; 
fire  occurs  at  one  warehouse. 

Earthquake  occurs;  TEAD  warehouses  intact;  munitions  intact; 
fire  occurs  at  two  warehouses. 


>v 


TABLE  5-1  (Continued) 


Event  ID 


Description 


SL273  Earthquake  occurs;  one  TEAD  warehouse  Is  damaged;  munitions 
Intact;  fire  occurs  at  one  warehouse. 

SL274  Earthquake  occurs;  one  TEAD  warehouse  Is  damaged;  munitions 
intact;  fire  occurs  at  two  warehouses. 

SL275  Earthquake  occurs;  two  TEAD  warehouses  damaged;  munitions 
intact;  fire  occurs  at  one  warehouse. 

SL276  Earthquake  occurs;  two  TEAD  warehouses  damaged;  munitions 
intact;  fire  occurs  at  two  warehouses. 

SL281  Earthquake  occurs;  UMDA  warehouses  intact;  munitions  Intact 
fire  occurs  at  one  warehouse. 

SL282  Earthquake  occurs;  UMDA  warehouses  Intact;  munitions  Intact 
fire  occurs  at  two  warehouses. 

SL283  Earthquake  occurs;  UMDA  warehouses  intact;  munitions  in  one 
warehouse  damaged;  no  fire  occurs. 

SL28A  Earthquake  occurs;  UMDA  warehouses  intact;  munitions  in  one 
warehouse  damaged;  fire  occurs  at  warehouse  with  damaged 
munitions . 

SL28S  Earthquake  occurs;  UMDA  warehouses  intact;  munitions  In  one 
warehouse  damaged;  fire  occurs  at  warehouse  with  undamaged 
munitions . 

SL286  Earthquake  occurs;  UMDA  warehouses  intact;  munitions  in  one 
warehouse  damaged;  fire  occurs  at  two  warehouses. 

SL287  Earthquake  occurs;  UMDA  warehouses  intact;  munitions  in  two 
warehouses  damaged;  no  fire  occurs. 

SL288  Earthquake  occurs;  UMDA  warehouses  intact;  munitions  in  two 
warehouses  damaged;  fire  occurs  at  warehouse  with  damaged 
munitions . 

SL289  Earthquake  occurs;  UMDA  warehouses  intact;  munitions  in  two 
warehouses  damaged;  fire  occurs  at  two  warehouses. 

SL2810  Earthquake  occurs;  one  UMDA  warehouse  damaged;  munitions  in 
one  warehouse  damaged;  no  fire  occurs. 
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Fig.  5-2.  Meteorite-induced  agent  release 
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5.2.  EXTERNAL  EVENTS 


The  external  events  that  were  evaluated  Include: 

•  Tornadoes  and  high  \flnds. 

•  Meteorite  strikes. 

•  Aircraft  crashes. 

•  Earthquakes. 

•  Lightnings. 

•  Floods . 

In  general,  the  amount  of  agent  released  to  the  atmosphere  from 
accidents  Induced  by  such  events  depends  on  the  extent  of  damage 
Incurred  to  the  building  structure  and  the  munition  itself.  The  muni¬ 
tions  are  currently  stored  In  Igloos,  warehouses,  or  open  storage  yards. 
Appendix  D  discusses  the  types  of  storage  structures  present  at  each 
CONUS  site,  as  well  as  the  kinds  of  munitions  stored. 

5.2.1.  Tornadoes  and  High  Winds 

The  accident  scenarios  Identified  involve  the  breaching  of  the 
munitions  In  the  storage  facilities  (l.e..  Igloos,  warehouses,  or  open 
yards)  by  tornado-  or  hlgh-wlnd-generated  missiles.  This  failure  mode 
was  determined  to  be  more  credible  than  that  Identified  In  sequence 
SL14,  which  Is  a  tornado/hlgh-wlnd-lnduced  building  collapse  that  could 
lead  to  the  crushing  of  munitions  by  the  falling  structure.  For  UBC 
designed  structures  such  as  a  warehouse,  the  wind  loads  will  fall  the 
walls  of  the  structure  before  the  structure  will  collapse.  Storage 
igloos  have  been  designed  to  resist  the  direct  effects  of  tornadoes  with 
winds  up  to  320  mph  except  for  the  possibility  of  missiles  breaching  the 
Igloo  doors  (Ref.  5-1).  For  the  above  reasons,  sequence  SL14  has  been 
screened  out  from  further  analysis. 


The  event  tree  developed  to  define  relevant  accident  sequences  Is 
shown  In  Fig.  5-1.  Neither  of  the  accident  sequences  (SL6  and  SL23) 
could  be  screened  out  Initially  as  more  detailed  quantitative  analysis 
Is  required  to  determine  the  necessary  wind  velocity  to  generate, 
missiles  which  could  penetrate  the  munitions.  Hence,  both  accident 
sequences  shown  In  the  event  tree  were  quantified. 

Essentially,  the  missile  penetration  of  the  munition  occurs  if 

(1)  a  tornado  or  extremely  high  wind  occurs  with  a  velocity  sufficient 
to  generate  a  missile  that  could  penetrate  the  Igloo  door,  warehouse 
wall,  or  transportation  container  wall,  and  the  munition  Itself;  and 

(2)  the  missile  actually  hits  the  target  munition. 

The  probability  of  a  missile  hitting  and  rupturing  a  munition  is 
the  product  of  four  variables:  (1)  the  probability  that  the  velocity 
vector  of  the  missile  is  nearly  perpendicular  to  the  target;  (2)  the 
probability  that  the  missile  is  oriented  properly  to  penetrate  the  tar¬ 
get;  (3)  the  number  of  missiles  per  square  foot  of  wind;  and  (4)  the 
target  area.  More  details  on  the  derivation  of  these  variables  are 
provided  in  Appendix  C  and  Ref.  5-2. 

If  the  missile  hits  a  burstered  munition,  two  failure  modes  are 
possible:  (1)  the  munition  is  opened  up  due  to  puncture  or  crush,  or 

(2)  the  missile  impact  causes  munition  detonation  due  to  the  application 
of  a  force  greater  than  the  "undue  force."  The  undue  force  is  defined 
as  "a  force  greater  than  that  generally  required  to  assetrf>le  the  muni¬ 
tion"  or  as  "any  force  which  could  cause  deformation  to  the  munition 
(other  than  minor  surface  deformation)  or  damage  to  the  explosive  train" 
(Ref.  5-3). 

5.2. 1.1.  Storage  Magazines.  The  analysis  of  the  vulnerability  of  the 
igloo  door  to  the  tornado-generated  missile  considered  the  two  types  of 
igloo  doors  present  at  the  CONUS  sites,  l.e.,  steel  and  concrete.  PBA 
and  TEAD  have  igloos  with  either  steel  or  concrete  doors,  while  the 
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igloos  at  ANAD,  LBAD,  PUDA,  and  UMDA  have  steel  doors  only.  For  con¬ 
servatism,  all  igloos  at  PBA  and  TEAD  were  assumed  to  have  concrete 
igloo  doors. 


The  steel  doors  require  a  missile  velocity  of  94  mph  for  penetra¬ 
tion  by  a  3-in.  steel  pipe  or  66  mph  for  penetration  by  a  utility  pole. 
For  the  concrete  doors,  the  penetration  velocity  for  a  3-in.  steel  pipe 
is  66  mph  and  for  the  utility  pole,  54  mph.  After  penetrating  the  door, 
the  remaining  missile  velocity  must  be  large  enough  to  rupture  the 
munition.  The  formula  for  the  required  initial  missile  velocity  is  as 
follows : 


vi  =  +  vi  , 

where  Vj  =  required  initial  velocity, 

Vjj  =  required  velocity  to  penetrate  the  door, 
Vjjj  =  required  velocity  to  rupture  the  munition. 


(5-1) 


In  order  for  a  missile  to  reach  the  velocity  required  to  penetrate 
the  igloo  door  and  the  munitions  inside,  a  wind  with  a  significantly 
higher  velocity  is  required.  Table  5-3  presents  the  relationship 
between  wind  velocity  and  missile  velocity. 


The  frequency  of  a  wind-generated  missile  penetrating  an  igloo  and 
a  munition  inside  the  igloo,  is  the  product  of  the  following: 


1.  The  frequency  of  a  tornado  or  wind  which  has  sufficient 
velocity  to  generate  a  missile  that  can  penetrate  the  igloo 
and  munition. 

2.  The  probability  of  a  missile  penetrating  the  igloo  and  hitting 
the  munition  in  such  a  way  as  to  cause  damage  and  is  calcu¬ 
lated  as  follows: 

Pp  =  Pd  X  Po  X  De  X  At  ,  (5-2) 
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TABLE  5-3 

WINDBORNE  MISSILE  VELOCITIES (a) 


Timber  plank 

60 

72 

90 

Three- inch-diameter 
standard  pipe 

40 

50 

65 

Utility  pole 

(c) 

(c) 

(c 

Automobile 

(c) 

(c) 

(c 

'*)Source:  Ref,  5-4. 

(b)Vertlcal  velocities  are  taken  as  2/3  the  horizontal  missile 
velocity.  Horizontal  and  vertical  velocities  should  not  be  combined 
vectorially. 

^^^Missile  will  not  be  picked  up  or  sustained  by  the  wind,  however 
for  this  analysis  any  Initial  missile  velocity  of  80  mph  or  less  was 
assigned  a  wind  velocity  of  250  mph. 


where  =  probability  that  the  velocity  of  the  missile  is 
nearly  perpendicular  to  the  target  plane, 

Pq  =  probability  that  the  missile  is  oriented  to  pene¬ 
trate  the  target  (l.e.,  missile  not  tumbling  or 
going  sideways), 

Dg  =  density  of  number  of  missiles  per  square  foot  of 
wind , 

A{.  “  target  area. 

Details  on  the  calculation  of  these  variables  are  given  in 
Ref.  5-2. 

The  site-specific  tornado  frequency  versus  velocity  curves  have 
been  presented  in  Section  A.  Two  types  of  missiles  were  initially  con¬ 
sidered:  (1)  a  3-ln.  pipe  and  (2)  a  utility  pole.  For  all  munition 

types,  it  was  found  that  the  utility  pole  had  a  higher  probability  of 
penetrating  munitions. 

Tables  5-4  and  5-5  present  the  wind  velocities  required  to  generate 
missiles  which  have  sufficient  velocity  to  penetrate  the  igloo  door  and 
the  various  munitions  stored  inside.  Table  5-6  presents  the  annual  fre¬ 
quencies  of  these  winds  occurring  at  each  of  the  sites  that  have  igloos. 
The  frequencies  were  read  from  the  curves  presented  in  Figs.  4-9  through 
4-11.  The  conditional  probability  of  a  missile  hitting  the  igloo  door 
and  the  munitions  stored  Inside  is  3.2  x  10"®  (see  Appendix  C). 

5.2. 1.2.  Warehouses .  The  warehouses  at  TEAD  are  designed  for  100-mph 
wind  loads  (Ref.  5-1).  Assuming  that  the  warehouses  at  NAAP  and  UMDA 
are  designed  to  the  UBC  requirements,  they  should  be  designed  for  at 
least  70  mph  winds.  An  analysis  of  the  UBC  requirements  shows  that 
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MISSILE  PENETRATION  THROUGH  STEEL  IGLOO  DOORS  AND  MUNITIONS 
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TABLE  5-6 

FREQUENCY  (PER  YEAR)  OF  A  WIND  HAZARD  SUFFICIENT  TO  BREACH 
MUNITIONS  IN  STORAGE  MAGAZINES 


AN  AD 

LBAD 

PBa('’) 

PUDA 

TEAD(b) 

UMDA 

Cartridges  and  mortars 

1.5E-6 

— 

— 

l.OE-7 

1.8E-9 

— 

Projectiles 

1.5E-6 

1.5E-6 

— 

l.OE-7 

1.8E-9 

1.8E-9 

Mines 

1.5E-6 

— 

2.6E-6 

— 

4.2E-9 

1.8E-9 

Rockets 

1.5E-6 

1.5E-6 

6.1E-6 

— 

1.5E-8 

1.8E-8 

Ton  containers 

3.8E-7 

— 

— 

— 

7.5E-10 

2.AE-10 

Bombs 

-- 

— 

— 

-- 

l.lE-9 

3.6E-10 

Spray  tanks 

— 

— 

— 

— 

— 

l.lE-9 

winds  will  fall  the  walls  of  UBC  designed  structures  before  the  frame  of 
the  structure  will  fall.  Based  on  the  margins  of  safety  required  by  the 
UBC,  the  concrete  walls  of  the  warehouses  at  TEAD  are  not  expected  to  be 
breached  by  winds  less  than  160  mph.  Breaching  of  the  concrete  walls  Is 
expected  to  Involve  cracking  and  spalling  of  the  concrete  and  the  possi¬ 
bility  of  the  wall  partially  separating  from  the  frame.  The  sheet  metal 
walls  of  the  warehouses  at  NAAF  and  UMDA  are  expected  to  be  blown  away 
by  115-mph  winds.  Neither  of  these  failures  are  expected  to  damage  the 
bulk  containers. 

In  order  for  a  wind  blown  missile  to  penetrate  a  spray  tank  In  a 
warehouse  at  TEAD,  It  must  pass  through  the  6-ln.  concrete  wall,  the 
spray  tank  overpack,  and  finally  the  spray  tank  Itself.  This  would 
require  a  283-mph  wind. 

A  250-mph  wind  can  generate  a  missile  that  will  penetrate  an  unpro¬ 
tected  ton  container.  Since  a  115-mph  wind  Is  expected  to  blow  away  the 
walls  of  the  warehouses  at  NAAP  and  UMDA,  the  walls  will  offer  no  pro¬ 
tection.  Therefore,  a  250-mph  wind  has  the  potential  to  generate  mis¬ 
siles  that  will  penetrate  the  ton  containers  stored  in  these  warehouses. 
Table  5-7  presents  the  frequency  of  occurrence  of  such  winds  at  these 
sites.  The  conditional  probability  of  a  missile  hitting  a  ton  container 
in  an  orientation  which  could  breach  the  container  Is  2.2  x  10"^  at  NAAP 
and  2.7  x  10"^  at  UMDA  (see  Appendix  C). 

5.2. 1.3.  Open  Storage.  Ton  containers  are  stored  in  open  storage  at 
APG,  PBA,  and  TEAD.  A  wind  velocity  of  250  mph  is  required  to  generate 
a  missile  that  can  penetrate  these  ton  containers.  The  frequencies  of 
generating  the  250-mph  wind  are  presented  In  Table  5-7.  The  conditional 
probability  of  a  missile  hitting  a  ton  container  in  an  orientation  which 
could  breach  the  container  Is  6.6  x  10“^  (see  Appendix  C). 

5.2. 1.4.  Tornado-Generated  Missiles  Cause  Munition  Detonation.  The 
analysis  of  scenario  SL23  Included  the  estimation  of  the  probability 
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TABLE  5-7 

FREQUENCIES  FOR  WIND -GENERATED  MISSILE  PENETRATION 
OF  TON  CONTAINERS  AND  SPRAY  TANKS  STORED  IN 
WAREHOUSES  AND  OPEN  STORAGE 


Site 

Storage 

Required 

Wind 

Frequency 
of  Wind 

Probability 
of  Hitting  and 
Rupturing  TC 

APG 

Open 

250 

l.OE-7 

6.6E-4 

PBA 

Open 

250 

1.5E-6 

6.6E-4 

NAAP 

Warehouse (*) 

250 

1.5E-6 

2.2E-4 

UMDA 

Warehouse 

250 

1.8E-9 

2.7E-4 

TEAD 

Warehouse 

283 

2.7E-10 

4.4E-4 

(^)Metal  walls. 
(^)Concrete  walls 


that  a  missile  impacting  a  munition  would  cause  it  to  detonate  or  in 
the  case  of  rockets,  cause  the  rocket  motor  to  ignite  and  subsequently 
detonate  the  burster.  The  data  presented  in  Ref.  5-5  indicated  that 
a  projectile  with  Comp  B  explosive  could  ignite  when  subjected  to  a 
minimum  Impact  velocity  of  123  mph.  Because  the  conditions  of  the 
tests  described  in  Ref.  5-5  do  not  fully  apply  to  the  conditions  being 
considered  here  (i.e.,  the  shell  casing  provides  protection  for  the 
bursters),  it  is  assumed  that  there  is  a  50%  chance  that  a  munition  will 
detonate  at  123  mph.  Furthermore,  Army  data  indicate  that  dropping  of 
thousands  of  burstered  munitions  from  AO  ft  did  not  lead  to  any  detona¬ 
tions  (Ref.  5-6).  However,  these  are  newer  munitions  and  do  not  fully 
represent  the  chemical  munitions  in  the  stockpile.  Therefore,  based  on 
the  consensus  of  risk  experts  (Ref.  5-7),  an  estimated  probability  of 
10“®/munltions  were  assigned  to  all  drops  of  6  ft  or  lower  (equivalent 
to  a  free  fall  drop  of  13.5  mph).  To  determine  the  probability  of 
detonating  a  munition  at  an  impact  velocity  equivalent  to  that  of  a 
missile  required  to  penetrate  the  igloo  and  the  munition,  we  assumed  a 
lognormal  distribution  and  derived  the  necessary  parameters  (e.g., 
standard  deviation  and  standard  normal  deviate)  from  these  two  data 
points.  The  calculation  details  are  given  in  the  calculation  sheets 
(Ref.  5-2). 

The  overall  frequency  for  this  scenario  is  the  product  of  the 
following : 


1.  The  frequency  of  a  tornado  or  wind  which  has  sufficient  veloc¬ 
ity  to  generate  a  missile  that  can  penetrate  the  igloo  and 
munition. 

2.  The  probability  of  a  missile  penetrating  the  igloo  and  hitting 
the  munition  in  such  a  way  as  to  cause  damage. 


3. 


The  probability  of  burster  detonation  from  impact. 


The  values  for  the  first  two  variables  have  already  been  presented 
in  Section  5.2. 1.1.  The  probability  of  a  detonation  given  penetration 
of  burstered  munitions  stored  inside  the  igloos  with  steel  doors  is  0.07 
and  for  concrete  doors,  0.055.  See  Ref.  5-2  for  calculations. 

5.2.2.  Meteorite  Strikes 

Like  tornado-generated  missiles,  meteorites  striking  the  igloos, 
warehouses,  and  the  outdoor  yards  can  lead  to  a  significant  amount  of 
agent  release.  The  consequence  of  such  an  accident  is  more  severe  than 
that  from  a  tornado-generated  missile  because  meteorite  strikes  gen¬ 
erally  Involve  fires.  Hence,  if  burstered  munitions  are  involved, 
explosive  detonations  could  occur  from  the  fire  or  from  direct  impact, 
leading  to  instantaneous  agent  releases. 

The  event  tree  developed  for  meteorite-initiated  accidents  is  shown 
in  Fig.  5-2.  The  scenarios  could  not  be  subjected  to  any  preliminary 
screening  without  doing  a  more  detailed  analysis  of  the  what  type  (stone 
or  iron)  and  size  of  meteorite  is  capable  of  penetrating  munitions 
stored  igloos,  warehouses,  or  outdoors.  The  only  identified  accident 
sequence  is  SL8. 

Storage  Magazines 

In  this  sequence  (SL8),  the  meteorite  penetrates  the  storage  maga¬ 
zine  and  ruptures  some  of  the  munitions  stored  inside.  The  meteorite 
is  expected  to  be  sufficiently  hot  to  cause  Ignition  of  the  exposed 
burster,  propellant,  and/or  agent.  The  fire  is  expected  to  spread, 
resulting  in  the  destruction  of  the  entire  inventory  of  the  storage 
magazine. 


Warehouses 


This  scenario  Is  similar  to  the  storage  magazines.  The  meteorite 
penetrates  the  warehouse  and  ruptures  some  of  the  bulk  munitions  stored 
Inside.  The  meteorite  causes  the  Ignition  of  the  exposed  agent.  Fire 
spreads  and  results  In  the  destruction  of  the  entire  warehouse 
Inventory. 

Open  Storage 


In  this  scenario,  the  meteorite  directly  Impacts  and  ruptures  some 
ton  containers.  The  heat  from  the  meteorite  Is  expect'^d  to  Ignite  the 
exposed  agent,  but  Is  not  expected  to  cause  the  rupture  of  additional 
munitions . 


5.2.2. 1.  Meteorite  Strike  Accident  Analysis.  About  3500  meteorites, 
each  weighing  over  1  lb,  strike  the  earth  each  year;  the  majority  of 
them  are  of  small  sizes  (Ref.  5-8).  Given  the  earth’s  surface  area  of 
5.A8  X  10^5  ft2,  the  frequency  of  meteorite  strikes  for  meteorites 
weighing  1.0  lb  or  greater  Is  6.4  x  lO'^^/ft^  (Ref.  5-8).  For  meteor¬ 
ites  one  ton  or  less,  stone  meteorites  are  approximately  10  times  more 
common  than  Iron.  However,  Iron  meteorites  are  more  dense  and  tend  to 
have  higher  Impact  velocities  and  therefore  represent  a  significant 
portion  of  the  total  meteorites  that  can  rupture  the  munitions. 

Table  4-16  shows  the  size  distribution  of  both  Iron  and  stone 
meteorites.  The  table  was  compiled  from  data  presented  In  Refs.  5-8 
and  5-9. 


For  agent  to  be  released,  the  meteorite  has  to  penetrate  the  stor¬ 
age  structure  and  the  munition  wall.  In  the  case  of  an  igloo,  this 
would  require  Initial  penetration  of  a  6-ln.  concrete  roof.  The  minimum 
meteorite  Impact  velocity  that  would  collapse  the  earth  cover  and  the 
6-ln.  concrete  roof  Is  1500  fps  for  stone  meteorite  and  3800  fps  for 
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Iron  meteorite.  The  overall  frequency  of  a  meteorite  capable  of  pene¬ 
trating  and  rupturing  the  munitions  in  the  igloo  is: 

P  =  F  (Fg  +  F^)  A  X  S  ,  (5-3) 

\Aiere  F  =  the  frequency  of  a  meteorite  weighing  one  pound  or  more 
striking  the  earth,  6. A  x  lO'^^/ft^, 

Fg  =  fraction  of  stone  meteorites  which  can  penetrate  the  target, 

F^  =  fraction  of  iron  meteorites  which  can  penetrate  the  target, 

A  =  target  area  (igloo,  warehouse,  or  open  storage  yard, 

S  =  spacing  factor. 

Table  5-8  presents  the  frequencies  for  meteorite  penetration  of 
munitions  stored  in  the  various  storage  configurations  along  with  the 
size  of  the  meteorites  required  to  penetrate  the  munitions  and  the  data 
required  to  evaluate  Eq.  5-3.  Supporting  calculations  are  presented  in 
Ref.  5-2,  and  the  methodology  is  discussed  in  Appendix  C. 

5.2.3.  Aircraft  Crashes 

The  sequences  describing  the  effects  of  an  aircraft  crash  on  muni¬ 
tions  in  storage  are  SLA,  SL5,  SL15,  SL16,  SL17,  SL18,  SL19,  SL20,  and 
SL21. 

The  effects  of  large  (>12,500  lb)  and  small  (12,500  lb  or  less, 
Including  helicopters)  aircraft  crashes  on  the  munitions  in  storage 
Igloos,  warehouses,  and  open  yards  were  evaluated.  Because  of  the 
potential  for  large  quantities  of  fuel  to  be  carried  by  large  aircraft 
and  the  potential  for  large,  high-velocity  missiles  (e.g.,  engines), 
the  large  aircraft  crash  scenarios  were  further  divided  into  direct  and 
indirect  crashes.  For  direct  and  Indirect  large  aircraft  crashes  onto 
the  storage  area  that  do  not  result  in  fire,  it  is  assumed  that  the 


impact  of  the  crash  is  strong  enough  to  cause  the  detonation  of  burst- 
ered  munitions. 

For  a  small  aircraft  crash  adjacent  to  the  storage  site  to  produce 
a  credible  event,  the  crash  would  have  to  be  so  close  that  it  would  vir¬ 
tually  be  a  direct  hit.  Therefore,  the  small  aircraft  crash  scenarios 
address  only  direct  hits  into  the  storage  areas  including  holding  areas. 

The  event  trees  developed  to  identify  the  agent  release  scenarios 
from  aircraft  crashes  are  shown  in  Figs.  5-3  and  5-4. 

5.2.3. 1.  Aircraft  Crash  Accident  Analysis.  In  summary,  the  following 
general  assumptions  were  made  in  deriving  the  large/small  aircraft  acci¬ 
dent  scenarios: 

1.  For  large  aircraft  crashes  onto  burstered  munitions,  it  is 
assumed  that  detonations  will  occur  for  both  indirect  and 
direct  hits,  and,  if  a  fire  occurs,  it  is  uncontalned. 

2.  No  small  aircraft  crashes  were  assumed  to  be  able  to  suffi¬ 
ciently  damage  the  igloo  to  cause  agent  releases. 

Direct  Crash  of  Large  Aircraft  Sequences  (SLA,  SL16.  SL17) 

For  a  direct  aircraft  crash,  the  target  area  is  the  surface  area  of 
the  building  or  open  yard. 

Storage  Magazines.  The  direct  crash  of  the  main  body  of  a  heavy 
military  or  commercial  aircraft  into  the  shell  or  front  face  of  a  stor¬ 
age  magazine  (igloo)  can  breach  the  igloo  and  allow  crash-generated 
missiles  and/or  aviation  fuel  to  enter  into  the  igloo.  There  is  a  high 
probability  that  one  or  more  munitions  will  be  crushed  or  punctured  by 
the  missiles.  Burstered  munitions  could  also  detonate  from  Impact.  If 


t 
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the  crash  produces  a  £lre,  the  fire  is  expected  to  spread  through  the 
igloo,  resulting  in  the  destruction  of  the  entire  Igloo  Inventory. 


Warehouses .  A  warehouse  is  not  expected  to  offer  any  substantial 
resistance  to  crash  of  a  large  aircraft.  The  direct  Impact  of  any  part 
of  a  large  aircraft  will  breach  the  warehouse  and  subject  the  stored 
munitions  to  crash-generated  missiles.  Bulk  containers  will  be  crushed 
or  punctured.  If  the  crash  produces  a  fire  that  Is  not  contained,  the 
destruction  of  the  entire  Inventory  Is  expected. 

Open  Storage.  The  crash  of  a  large  aircraft  Into  an  open  area  Is 
expected  to  breach  a  large  number  of  ton  containers.  If  the  crash  pro¬ 
duces  a  fire,  and  It  Is  not  contained.  It  Is  expected  to  breach  addi¬ 
tional  containers  In  the  Immediate  vicinity  of  the  Initial  container 
that  Is  on  fire. 

Indirect  Crash  of  a  Large  Aircraft  Sequences  (SL5.  SL20.  SL21) 

For  an  Indirect  crash,  the  target  area  Is  determined  by  Increasing 
all  perimeters  for  the  direct  crash  by  200  ft. 

Storage  Magazines.  Should  a  large  aircraft  crash  adjacent  to  an 
Igloo,  the  area  that  Is  most  vulnerable  is  the  Igloo  door.  The  crash¬ 
generated  missiles  can  breach  the  Igloo  door  which  essentially  provides 
a  pathway  to  the  breaching  of  munitions  In  the  line  of  site  of  the  mis¬ 
sile.  Alternatively,  the  Igloo  door  may  already  be  open  at  the  time  of 
the  crash  and  the  missile  could  directly  penetrate  the  munitions.  If 
fire  Is  Involved,  the  missile  could  already  be  on  fire  or  the  fire  could 
propagate  Into  the  Igloo  opening.  Thus,  If  fire  Is  not  contained,  the 
amount  of  agent  release  Is  the  same  as  for  the  direct  crash  of  a  large 
aircraft  Into  an  Igloo. 

Warehouses.  The  designs  of  the  warehouses  are  such  that  the  crash 
of  a  large  aircraft  Into  an  area  adjacent  to  a  warehouse  may  also  breach 


the  warehouse  if  the  aircraft  is  flying  towards  the  warehouse  at  the 
time  of  the  crash.  The  amount  of  munitions  that  are  initially  Impacted 
would  be  less  than  the  direct  crash  scenario.  However,  if  fire  is 
involved  and  uncontained,  the  amount  of  agent  release  is  the  same  as 
for  the  direct  crash  of  large  aircraft  into  a  warehouse. 

Open  Storage.  The  accident  scenario  for  the  crash  of  a  large  air¬ 
craft  into  an  area  adjacent  to  the  open  storage  area  considers  that 
there  is  a  50Z  chance  that  some  ton  containers  would  be  breached  by  the 
crash-generated  missile.  If  fire  is  Involved  and  not  contained,  addi¬ 
tional  containers  would  rupture  due  to  excessive  heating. 

Direct  Crash  of  a  Small  Aircraft  Sequences  (SL15,  SL18.  SL19) 


Storage  Magazines.  Due  to  the  high  strength  of  the  storage  maga¬ 
zine,  the  crash  of  a  small  aircraft  is  not  expected  to  breach  an  igloo 
or  affect  the  structural  integrity  of  an  igloo. 

Warehouses .  The  crash  of  a  small  aircraft  into  a  warehouse  would 
very  likely  breach  the  warehouse.  The  resulting  crash-generated  mis¬ 
siles  are  expected  to  crush  or  puncture  some  munitions.  If  the  crash 
produces  a  fire  and  it  is  not  contained,  the  fire  would  involve  the 
entire  inventory. 

Open  Storage.  The  crash  of  a  small  aircraft  into  an  open  storage 
area  is  similar  to  the  large  aircraft  crash  into  an  open  storage  area 
except  a  smaller  number  of  ton  containers  is  breached. 

5. 2. 3. 2.  Aircraft  Crash  Frequency.  The  frequency  of  an  aircraft  crash 
Ing  while  in  an  airway  or  in  the  vicinity  of  an  airport  can  be  computed 
as  shown  in  Section  4.2. 1.3. 


r. 


The  annual  frequency  of  a  crash  Into  a  specific  facility  was  com¬ 
puted  by  multiplying  the  appropriate  frequency  taken  from  Table  4-13  by 
the  effective  target  area  of  the  facility  (see  Appendix  C).  Table  5-9 
summarizes  these  annual  frequencies.  The  calculations  of  the  effective 
areas  are  contained  in  Ref.  5-2  and  take  into  account  such  factors  as 
aircraft  wing  span,  facility  height,  and  facility  vulnerability. 

5 . 2 . 3 . 3 .  Probability  of  Fire  Resulting  From  An  Aircraft  Crash .  The 
probability  of  a  fire  resulting  from  the  crash  has  been  estimated  to 
be  0.45  (Ref.  5-11).  The  successful  containment  of  the  fire  is  defined 
here  to  be  0.5  h  for  unpackaged  nonburstered  munitions.  This  time  was 
selected  based  on  the  thermal  failure  threshold  data  presented  in  Appen¬ 
dix  F,  which  indicate  that  direct  heating  of  ton  containers  for  36  min 
leads  to  hydraulic  rupture.  For  unpackaged  burstered  munitions,  the 
thermal  failure  threshold  range  from  4  min  for  rockets  to  23  min  for 
mines.  Since  the  Army  policy  is  not  to  fight  a  fire  involving  direct 
heating  of  burstered  munitions,  the  probability  of  the  "failure  to 
contain  fire"  event  is  essentially  1.0. 

Thus,  the  amount  of  agent  released  from  bulk  containers  subjected 
to  aircraft  crash  fires  depends  on  the  ability  to  contain  the  fire.  If 
fire  is  allowed  to  progress  for  more  than  30  min,  more  containers  will 
rupture. 


The  ability  of  the  fire-fighting  team  to  extinguish  an  aircraft 
crash  fire  depends  on  many  variables  such  as  the  precise  crash  site,  the 
burn  time  of  the  resulting  fire,  the  availability  of  resources  necessary 
to  contain  the  fire,  etc.  If  fire  fighters  arrive  at  the  crash  site  in 
a  relatively  short  period  of  time,  the  fire  will  be  easier  to  extinguish 
since  it  is  not  likely  to  have  spread  very  far.  Because  the  fire  will 
Involve  chemical  agent,  additional  precautions  will  have  be  taken  before 
the  fire-fighting  team  can  start  extinguishing  the  fire.  Their  arrival 
at  the  perimeter  of  the  MDB  or  MHI  is  assumed  to  occur  about  5  min  after 
the  crash.  The  crew  will  have  to  put  on  agent  protective  clothing  in 
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TABLE  5-9 

DATA  BASE  FOR  AIRCRAFT  CRASH- INITIATED  SCENARIOS  FOR  STORAGE 

24-Jul-37 

DATA  3ASE  rCR  AIRCRAFT  CRASH-INlirATED  3CHHARICS  FOR  STORAGE 

EVENT  VARIABLE  FREQUENCY  OR  UNIT  ERROR  FACTOR  SEf 


VARIABLE  FREQUENCY  OR  UNIT  ERROR  FACTOR 
ID  PROBABILITY 


REFERENCE 


m. 
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TABLE  5-9  (Continued) 
BAM  BASE  FOR  AIRCRAFT  CRASH-INITIATED  SCENARIOS  FOR  3T0RA6E 


EVENT 

VARIABLE 

lu 

FREOUENCY  OR 
PR0BA3I1.1TY 

UNIT 

ERROR  FACTOR 

REFERENCE 

Crasn  results  in  fire 

YF 

4.CE-01 

none 

none 

Ref.  3-11 

Fire  not  contnd  in  1/2  tir  (burstrd) 

FNC3 

l.OE+00 

none 

none 

Ref. 

S-2  and  Appenoi: 

1 

li 

Fire  contnd  in  1/2  hr  (nonburstrd) 

FCHB 

3.4E-04 

none 

3  Ref. 

S-2  and  Appendix 

J 

Fire  not  contnd  in  1/2  hr  (nonburstrd) 

FNCNS 

l.C£*00 

none 

none 

Ref. 

3-2  and  Appendix 

■; 

Fire  contained  (uh  or  op)  seal! 

SFNB 

1.9E-)2 

none 

3 

Ref.  5-2 

Stall  aircraft  crash  xarehouse  NAAP 

SANAAP 

l.aE“38  per  year 

10 

Ref.  3-2 

Stall  aircraft  crash  wrehouse  'ItlOA 

SAUNOA 

r.cE-os 

10 

Ref.  3-2 

Stall  aircraft  crash  tarehouse  TEAO 

SA7EA0 

:.iE-)8 

10 

Ref.  3-2 

Stall  aircraft  crash  open  APS 

SAOAPS 

a*it— 

10 

Ref.  3-2 

Stall  aircraft  crash  open  PSA 

SAOFSA 

1.3E-V4 

10 

Ref.  3-2 

Stall  aircraft  crash  open  TEAO 

3A0TEA0 

:.2c-)7 

10 

Ref.  3-: 
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addition  to  their  normal,  fire-fighting  suits  of  thermal  protective 
clothing.  Donning  these  clothes  and  checking  for  proper  mask  fit  would 
take  several  more  minutes,  if  it  is  assumed  that  the  crew  was  partially 
dressed;  i.e.,  in  a  standby  readiness  mode.  Because  of  all  the  detec¬ 
tion,  observation,  communication,  preparation,  and  travel  tasks 
Involved,  it  is  estimated  that  it  would  take  the  fire-fighting  team 
15  min  to  get  to  the  scene  of  the  fire. 


Once  at  the  scene,  the  time  it  takes  to  actually  extinguish  the 
fire  is  difficult  to  estimate.  GA  Interviewed  local  fire  fighting  per¬ 
sonnel  to  get  their  opinion  on  how  long  it  takes  to  extinguish  a  fire 
from  a  small  aircraft  crash  versus  large  aircraft  crash.  No  definite 
time  can  be  given  because  of  the  many  variables  Involved.  But  based  on 
local  experience,  it  would  take  1  to  3  h  to  extinguish  a  fire  from  a 
small  aircraft;  while  it  would  take  3  to  10  h  for  a  large  aircraft  fire. 
Using  the  lognormal  distribution,  GA  then  derived  the  probability  of 
containing  the  fire  in  0.5  h  or  less  and  took  no  credit  for  the  first 
15  min  of  the  fire.  More  details  are  provided  in  the  calculation  sheets 
(Ref.  5-2). 


5.2.4.  Earthquakes 


5. 2. 4.1.  Storage  Magazines.  The  earthquake-initiated  accident  affect¬ 
ing  the  storage  Igloos  assumes  that  the  earthquake  causes  the  munitions 
in  the  igloo  to  fall  and  be  punctured  given  the  presence  of  a  probe  on 
the  igloo  floor  or  the  fall  could  cause  a  burstered  munition  to  detonate 
(Sequence  SL7).  This  sequence  is  modeled  using  the  event  tree  illus¬ 
trated  in  Fig.  5-5. 


The  storage  magazines  are  expected  to  survive  the  largest  credible 
earthquake  with  little  or  no  damage.  Some  cracking  or  spalling  of  the 
concrete  is  possible,  but  this  should  not  produce  a  threat  to  the  muni¬ 
tions  or  significantly  change  the  containment  capability  of  the  maga¬ 
zine.  Igloos  have  been  tested  by  very  large  external  explosions  and 
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have  survived  without  damage  (Ref.  5-12).  The  data  from  these  tests 
indicate  that  the  igloo  experienced  accelerations  which  were  in  excess 
of  20  g.  Though  an  explosion  is  not  as  potentially  damaging  to  an  igloo 
as  an  earthquake  of  equal  acceleration,  the  similarities  are  sufficient 
to  conclude  that  a  very  large  earthquake,  in  the  range  of  1.0  g,  is  not 
likely  to  damage  an  igloo. 

Sequence  SL7  postulates  that  the  earthquake  causes  the  stacked 
munitions  to  fall  and  may  be  punctured  upon  Impact.  Based  on  the  coef¬ 
ficient  of  friction  between  pallets  of  munitions,  a  0.3-g  earthquake 
t/lll  likely  cause  some  stacked  munitions  to  fall  and  a  0.5-g  earthquake 
will  cause  a  large  number  to  fall.  The  highest  stacked  munitions  in  an 
igloo  can  potentially  fall  6  ft.  The  munition  failure  threshold  data 
indicate  that  all  palletized  munitions  and  bulk  containers  can  survive 
the  impact  of  a  drop  from  this  height  but  could  be  punctured  if  they 
were  to  land  on  a  probe  vdilch  was  sufficiently  sharp  and  rigid.  For 
this  analysis  a  0.3-g  earthquake  was  assumed  to  cause  25%  of  the  stacked 
pallets  to  fall  while  a  0.5-g  earthquake  will  cause  100%  of  the  stacked 
pallets  to  fall.  The  number  of  pallets  which  have  the  potential  of 
impacting  a  probe  was  estimated  for  each  munition  type  based  on  (1)  how 
the  pallets  are  stacked  and  (2)  the  floor  area  available  for  the  pallets 
to  fall.  The  calculation  details  are  provided  in  Ref.  5-2. 

The  analysis  of  the  presence  of  a  probe  in  the  igloo  has  indicated 
that  it  is  unlikely  that  a  probe  inside  the  igloo  that  is  sufficiently 
rigid  and  sharp  to  damage  a  nunition.  Table  5-10  provides  the  earth¬ 
quake  frequency  data  for  each  of  the  eight  sites  and  the  puncture  proba¬ 
bility  of  a  munition  type  given  a  6-ft  drop. 

Sequence  SL22  Involves  the  detonation  of  burstered  munitions 
resulting  from  an  earthquake-induced  fall.  The  probability  of  a  muni¬ 
tion  detonating  from  a  6-ft  drop  is  estimated  using  the  same  approach 
discussed  for  detonations  due  to  Impact  by  wind-generated  missiles. 
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TABLE  5-10 

DATA  BASE  FOR  ANALYSIS  OF  EARTHQUAKE-INDUCED 
AGENT  RELEASE  IN  THE  STORAGE  IGLOOS 


Map  Area  2 

Map  Area  5  Site;  ANAD,  LBAOy  FBA| 
Site;  TEAD  UMDA,  and  PUDA 


Earthquake  frequency  (/yr)  at 


0.3  to  0.5  g  (Fi) 
>0.5  g  (F2) 


6.0E-A 

l.OE-4 


1.9E-5 

6.0E-6 


Probability  stacked  pallets  will 
fall  at 


0.3  to  0.5  g  (Pi) 
>0.5  g  (P2) 


Munition  Type 

Number  of  Munitions 
Falling  At 

(Ni) 
0.3  to  0. 

.5 

g 

(N2) 
>0.5  g 

Bomb 

3 

11 

105-mm  cartridge 

5 

20 

A. 2-in.  mortar 

5 

18 

Ton  container 

6 

22 

Mine 

A 

lA 

Projectile 

11 

A6 

Rocket 

5 

20 

Spray  tank 

N/A 

N/A 

SL7  (accident  frequency)  =  (Fi 

* 

Pi  * 

Nl) 

+  (F2 

* 

P2  * 

N2) 

§ 


•j- 
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Fig.  5-6.  Earthquake- induced  releases  from  the  warehouses 
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5. 2. 4. 2.  Warehouses .  The  event  tree  describing  release  scenarios 
resulting  from  earthquake-induced  accidents  in  warehouses  is  shown  in 
Fig.  5-6.  The  event  tree  applies  to  the  long-term  storage  warehouses  at 
TEAD,  NAAP,  and  UMDA.  Spray  tanks  are  stored  at  the  two  warehouses  at 
TEAD.  Ton  containers  are  stored  at  NAAP  in  one  warehouse  and  at  UMDA  in 
two  adjacent  warehouses. 

Accident  scenarios  describing  releases  from  long-term  storage  ware¬ 
houses  are  given  in  Table  5-11.  Scenario  designations  are  SLxxx26x  for 
the  NAAP  warehouse,  SLxxx27x  for  the  TEAD  warehouses,  and  SLxxx28x  for 
the  warehouses  at  UMDA.  The  accident  sequence  designations  are  also 
shown  on  the  event  tree  in  Fig.  5-6.  For  those  accident  scenarios  where 
no  agent  release  occurs,  the  release  scenario  is  labeled  "NR."  Those 
release  scenarios  whose  frequency  is  below  1.0  x  lO'^*^  for  all  sites 
have  been  screened  using  the  frequency  criterion  and  labeled  with  an  "F" 
in  the  event  tree.  The  events  modeled  in  Fig.  5-6  are  discussed  below: 

1*  Earthquake  Occurs.  The  Initiating  event  (Event  1)  in  Fig.  5-6 

is  earthquake  occurrence.  To  simplify  the  event  tree  evalua¬ 
tion,  Event  1  further  restricts  the  earthquake  intensity  to 

an  acceleration  range  from  g^  (0.15  to  0.2  g)  to  g^  (>0.7  g). 

Seven  ranges  are  considered: 

a.  0. 15  to  0.2  g. 

b.  0.2  to  0.3  g. 

c.  0.3  to  0.4  g. 

d.  0.4  to  0.5  g. 

e.  0.5  to  0.6  g. 

f .  0.6  to  0. 7  g. 

g.  Greater  than  0.7  g. 


TABLE  5-11 

EARTHQUAKE- INDUCED  ACCIDENTS  IN  WAREHOUSES 


Agent  Releas 

le  Sequence 

Median  Frequency 
(per  Year) 

SLSVF 

271 

2.7E-04 

SLSVF 

272 

8.3E-06 

SLSVF 

273 

3.1E-05 

SLSVF 

274 

1.9E-06 

SLSVF 

275 

7.0E-07 

SLSVF 

276 

4.8E-08 

SLKVF 

261 

l.lE-06 

SLKVS 

262 

9.5E-07 

SLKVF 

263 

l.lE-09 

SLKVS 

264 

3.3E-04 

SLKVF 

265 

1.4E-04 

SLKHF 

281 

4.8E-07 

SLKHF 

282 

6.3E-05 

SLKHS 

283 

1.9E-07 

SLKHF 

284 

3.1E-10 

SLKHF 

285 

3.1E-10 

SLKHF 

286 

F 

SLKHS 

287 

8.5E-10 

SLKHF 

288 

F 

SLKHF 

289 

F 

SLKHS 

2810 

1.4E-05 

SLKHF 

2811 

2.9E-C5 

SLKHF 

2812 

1.2E-07 

SLKHS 

2813 

7.6E-08 

SLKHF 

2814 

6.9E-08 

SLKHF 

2815 

3.6E-10 

SLKHS 

2816 

5.6E-05 

SLKHF 

2817 

l.lE-05 

NOTE:  F  denotes  extremely  low  frequency. 


5-39 


Earthquakes  below  0.15  g  are  not  considered  in  the  analysis 
because  the  damage  probabilities  associated  with  such  tremors 
are  negligibly  small.  Detailed  examination  of  seismic  ranges 
above  0.7  g  is  unnecessary  because  earthquakes  above  0.7  g 
have  a  probability  of  almost  1.0  of  causing  damage. 

The  initiating  event  frequency  at  each  site  is  the  site- 
specific  frequency  at  which  earthquakes  in  the  range  gl  to 
gu  occur. 

"K"  Warehouses  Damaged  by  Earthquake.  Warehouse  damage  is 
defined  as  structural  collapse.  This  is  the  only  failure 
mode  of  interest  because  it  will  crush  stored  ton  containers. 
Although  less  severe  damage  can  result  from  an  earthquake,  it 
was  screened  in  quantifying  the  Event  2  probability  because  it 
does  not  induce  ton  container  failure. 


Three  damage  combinations  are  considered  in  Event  2: 

a.  No  warehouses  are  damaged  (K  =  0). 

b.  Only  one  warehouse  is  damaged  (K  =  1). 

c.  Both  warehouses  are  damaged  (K  =  2). 

Tracking  these  three  probabilities  is  necessary  in  order  to 
estimate  the  agent  release  source  term.  Note  that  since  there 
is  only  one  warehouse  at  NAAP,  the  probability  that  K  =  2  is 
zero  for  that  site. 

Event  2  damage  probabilities  are  based  upon  a  generic  study  of 
damage  to  structures  designed  to  the  Uniform  Building  Code. 


5-AO 


Munitions  Damaged  In  ''L*'  Warehouses.  Event  3  addresses 
VThether  the  earthquake  causes  an  agent  release  from  the  stored 
munitions.  Two  failure  modes  are  analyzed:  puncture  and 
crushing. 

Only  ton  containers  are  subject  to  these  failures.  Spray 
tanks  are  in  overpacks  which  protect  them  from  crush  forces. 
Furthermore,  they  are  not  stocked  while  in  storage,  hence 
cannot  be  punctured. 

Three  damage  combinations  are  considered  in  Event  3; 

a.  No  agent  releases  result  from  the  earthquake  (L  =  0). 

b.  The  earthquake  causes  an  agent  release  in  one  warehouse 
(L  =  1). 

c.  The  earthquake  causes  an  agent  release  in  both  warehouses 

(L  *  2). 

The  puncture  probability  is  the  probabiLLt-y— t^istr'ar^least  one 
ton  container  falls  and  strikes  a  probe  of  sufficient  size  and 
density  to  penetrate  it.  The  probability  that  ton  containers 
are  crushed  is  correlated  to  warehouse  damage.  If  K  is  0,  1, 
or  2  in  Event  2,  then  ton  containers  in  none,  1,  or  2  ware¬ 
houses  are  crushed,  respectively.  Since  the  NAAP  site  has 
only  one  warehouse,  the  probability  that  L  =  2  is  zero  for 
that  site.  In  addition,  since  only  spray  tanks  are  stored 
in  the  TEAD  warehouses,  L  can  only  be  zero  at  that  site. 

Ignition  at  "M"  Warehouses.  Seismically  initiated  fires  are 
an  important  consideration  because  they  influence  agent  dis¬ 
persion  and  can  thermally  fail  agent  containers.  This  second 


aspect  Is  particularly  important  at  TEAD  because  fire  damage 
is  the  only  spray  tank  container  failure  mode. 


Electrical  fires  are  the  only  concern  in  warehouses.  The 
three  conditions  necessary  for  an  electrical  fire  are: 

a.  An  electrical  fault  capable  of  causing  arcing. 

b.  A  supply  of  electric  power  to  sustain  the  arc. 

c.  Contact  with  an  Ignition  source. 

Including  this  second  condition  in  the  fire  ignition  proba¬ 
bility  calculation  is  Important  because  available  data  indi¬ 
cate  that  offsite  power  can  be  lost  at  a  relatively  low 
seismic  Intensity. 

Condition  three  considers  both  the  agent  and  wood  dunnage 
assemblies  as  possible  Ignition  sources  in  the  warehouses.  If 
ton  containers  have  been  damaged  by  either  crush  or  puncture, 
the  probability  of  igniting  spilled  agent  given  an  electrical 
arc  has  occurred  is  essentially  unity.  If  no  munition  damage 
has  occurred,  the  probability  of  ignition  is  represented  as 
the  ratio  of  exposed  wood  surface  area  to  the  total  area  of 
the  warehouse. 

Similar  to  previous  events.  Event  4  addresses  how  many  ware¬ 
houses  experience  ignition. 

Ignition  at  Warehouse  With  Damaged  Munitions.  If  the  earth¬ 
quake  only  damages  the  containers  stored  in  one  warehouse  and 
ignition  occurs  at  only  one  warehouse,  it  is  necessary  to  dis¬ 
cern  VThether  the  fire  is  in  the  warehouse  with  the  damaged 
containers.  If  the  fire  is  in  the  same  warehouse  as  the  dam¬ 
aged  containers,  thermal  failure  and  the  subsequent  release  of 
agent  from  the  second  warehouse  is  averted.  However,  if  the 


damaged  containers  and  fire  are  in  different  warehouses,  then 
the  agent  release  source  term  will  be  increased. 


Suppression  of  fires  has  a  negligible  probability  since  the 
warehouses  have  no  fire  alarms  nor  automatic  fire  suppression 
systems.  For  this  reason  it  is  not  considered  in  the 
warehouse  analysis. 

5.2.5.  Lightning 

Munitions  stored  in  igloos  and  warehouses  are  protected  from  light¬ 
ning.  Hence,  only  ton  containers  stored  outdoors  at  APG,  PBA,  and  TEAD 
may  be  susceptible  to  lightning  strikes.  No  event  tree  model  has  been 
developed  for  this  scenario.  Basically,  if  sufficiently  energetic 
lightning  strikes  a  ton  container,  the  container  will  be  breached  and 
agent  will  spill  to  the  ground. 

A  lightning  strike  density  for  the  contiguous  United  States  was 
previously  determined  (Ref.  5-13)  based  on  the  correlation  developed 
from  the  duration  of  thunderstorms.  Based  on  this  empirical  correla¬ 
tion,  the  frequency  ( events /yr-km^)  for  the  different  storage  locations 
has  been  determined,  as  shown  in  Table  A-6. 

Using  conservative  assumptions,  a  threshold  lightning  energy 
required  to  burn  through  the  ton  container  wall  was  found  to  be  propor¬ 
tional  to  the  fourth  power  of  the  wall  thickness  as  described  in  the 
calculation  sheets  (Ref.  5-2).  Neglecting  corrosion  thinning  of  the 
container  wall,  the  maximum  value  of  failure  frequency  for  each  cluster 
of  15  ton  containers  at  PBA  is  5.1  x  10“^®,  as  shown  in  Table  5-12. 

The  results  Indicate  that  the  threshold  lightning  energy  required 
to  burn  through  the  container  wall  is  a  strong  function  of  wall  thick¬ 
ness.  In  order  to  assess  the  sensitivity  of  the  failure  frequency  to 


TABLE  5-12 

SITE-SPECIFIC  LIGHTING  STRIKE  INFORMATION 
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corrosion,  a  probability  density  function  for  wall  thickness  was  derived 
by  conservatively  assuming  that  one  ton  container  stored  outdoors  has  a 
leak  through  Its  wall.  This  Is  a  conservative  assumption  since  no  wall 
leaks  have  been  reported.  This  probability  density  function  for  wall 
thickness  Is  used  In  conjunction  with  the  lightning  energy  requirements 
to  calculate  the  failure  frequency  of  a  cluster  of  21  containers  at  the 
different  sites.  As  expected  for  the  PBA  site,  the  failure  probability 
Is  Increased  by  approximately  55  from  the  previous  value  of  5.1  x 

If  all  other  agent  release  scenarios  have  frequencies  that  are 
below  this  bounding  value,  then  the  extent  of  container  corrosion  must 
be  Investigated.  However,  If  other  scenarios  Involving  comparable  or 
larger  amounts  of  agent  release  also  have  frequencies  much  higher  than 
the  bounding  value  for  the  lightning  Initiated  release,  then  lightning 
release  scenarios  can  be  Ignored.  This  Is  true  for  aircraft  crash 
accidents  which  lead  to  much  larger  releases  and  also  higher  frequencies 
for  some  sites. 

5.2.6.  Floods 

During  a  flood,  materials  such  as  lumber,  crates,  storage  tanks, 
and  other  lightweight  containers  may  be  carried  away  by  flood  flows  and 
cause  damage  to  downstream  structures.  Water  velocities  during  floods 
depend  largely  on  the  size  and  shape  of  the  cross  sections,  conditions 
of  the  stream,  and  the  slope  bed,  all  of  which  vary  on  different  streams 
and  at  different  locations.  In  the  upper  reaches  of  a  flood  basin,  main 
channel  flows  could  be  as  high  as  14  ft/s,  but  typical  overbank  flow  is 
less  than  2  ft/s  (Ref.  5-14). 

Munitions  stored  In  Igloos  and  warehouses  are  considered  protected 
against  flood-generated  projectiles.  The  only  munition  stored  outdoors 
are  mustard-filled  ton  containers  (APG,  PBA,  and  TEAD). 


The  puncture  equation  Is  as  follows: 


Vm  *  {64  (672  DT)3/2}/W  ,  (5-4) 

where  D  >  probe  diameter  (In.), 

T  »  wall  thickness  to  be  punctured  (In.), 

W  «  weight  of  projectile  (l.e.,  moving  object)  (lb), 

“  velocity  of  projectile  (ft/s). 

The  wall  thickness  of  the  ton  container  Is  0.41  In.  Assuming  the 
smallest  probe  size  Is  0.8-ln.  In  diameter, 

Vffl  (W)  =  (64) (672  DT)3/2  =  217,335 

For  puncture,  the  following  conditions  must  be  met: 

Vm  W 

(ft/s)  (lb) 

1  217,335 

2  53,334 

6  6,037 

10  2,173 

14  1,108 

A  credible  flood-generated  projectile  Is  assumed  to  be  a  light, 
steel  tank  with  a  rigidly  attached  0.8-ln.  diameter  probe.  This  could 
be  a  water  storage  tank  or  a  gasoline  tank,  using  a  tank  height  to  diam¬ 
eter  ratio  of  1.2  and  a  wall  thickness  of  0.25  In.  Table  5-13  presents 
the  data  developed  for  steel  tanks.  Tanks  larger  than  10  ft  In  diameter 
would  not  be  credible  except  In  main  channel  flows.  Thus,  typical  over¬ 
bank  flows,  l.e.,  2  ft/s,  would  not  produce  puncture. 


TABLE  5-13 

PROBABLE  SIZE  DISTRIBUTION  FOR  STEEL  TANKS 


D 

Diameter 

(ft) 

1.2D 

Height 

(ft) 

57.67d2 

Weight 

(lb) 

5.3407d2 
Surface  Area 
(ft^) 

2 

2.4 

231 

21.36 

4 

4.8 

923 

84.45 

6 

7.2 

2076 

192.0 

8 

9.6 

3690 

342.0 

Puncture  could  be  initiated  by  using  an  extreme  overbank  velocity 
of  6.13  ft/s  combined  with  a  10-ft  diameter  floating  tank  with  a  rigidly 
attached  0.8-in.  probe.  The  probability  of  a  6.13  ft/s  overbank  veloc¬ 
ity  is  estimated  to  be  less  than  lOZ.  This  condition  will  be  designated 
as  the  reference  flood-generated  projectile. 

The  probability  of  puncture  of  a  single  ton  container  from  the 
reference  single  floating  tank  condition  is  as  follows: 

Pp  =  Lp  X  Tp  X  Pp  ,  (5-5) 

where  Lp  =  location  probability,  i.e.,  the  probability  that  the  probe 
attached  to  the  floating  tank  is  pointing  towards  the  ton 
container  wall  at  the  moment  of  collision, 

Tp  =  target  probability,  i.e.,  the  probability  that  the  tank 
collides  with  the  ton  container, 

Pp  =  probability  of  probe  being  present. 

Lp  can  be  approximated  by  the  ratio  of  total  surface  area  to  the 
effective  surface  position.  Assuming  that  the  probe  must  be  within  a 
1  ft^  location,  then; 

Lp  .  1/(7. 06)2  (5.3407)  =  0.0038 

Tp  can  be  approximated  by  assuming  a  flood  channel  width  at  the 
point  of  collision  and  comparing  that  to  the  length  of  a  ton  container 
(82  in.).  Using  a  three-mile  wide  channel,  ■vdiich  is  conservative  for  a 
typical  flood,  then: 

Tp  =  82/{(5280)  (12)  (3)}  =  0.00043  or  0.0043 
for  the  total  width  of  10  containers. 


Pp  is  estimated  to  be  1  x  10“^.  Thus  the  probability  of  a  refer¬ 


ence  tank  hitting  and  rupturing  a  ton  container  is 


Pp  =  (0.0038)  (0.0043)  (0.001)  =  1.6  x  10-8 


It  would  seem  reasonable  from  the  flood  basin  size  to  assume  no 


more  than  one  reference  floating  projectile  per  flood  and  the  flood 
reoccurrence  to  be  greater  than  100  years.  In  addition,  the  probability 
of  a  6  ft/s  overbank  velocity  is  estimated  as  10%.  Thus,  the  probabil¬ 
ity  of  rupture  is  approximately  1.63  x  lO'^^/yr. 


Thus,  based  on  the  above  calculations  this  sequence  can  be  screened 
out  on  the  basis  that  its  frequency  is  below  the  screening  criterion. 


VM  ifw.T^Hv  m  WWVU  n  w  w  w  VI  w  Vi  wji  Ki.  »u^  "i  »J.' 


5.3.  SPECIAL  HANDLING  ACTIVITIES 


5.3.1.  Leaking  Munitions 

Several  scenarios  were  Identified  that  specifically  address  the 
leakage  of  stored  munitions  and  the  accidents  that  could  occur  In  the 
process  of  isolating  leaking  munitions  which  could  aggravate  the  exist¬ 
ing  situation.  The  event  trees  are  shown  in  Figs.  5-7  and  5-8. 

Sequence  SLl  addresses  the  possibility  that  a  munition  could  leak 
from  the  time  the  periodic  Inspection  has  been  performed  until  the  next 
periodic  Inspection.  It  Is  assumed  that  the  leaking  munition  will  be 
detected  at  the  time  the  next  inspection  is  made.  For  all  sites,  except 
at  APG,  the  inspections  are  assumed  to  be  performed  quarterly  (90  days). 
At  APG,  the  ton  containers  are  Inspected  daily.  No  event  tree  was 
developed  for  this  scenario  since  It  Is  represented  by  a  single  event 
failure. 


Sequences  SL2  and  SL9  address  accidents  related  to  the  movements 
of  munitions  for  Inspection  or  Isolation  of  leakers.  The  forklift  tine 
puncture  or  drop  of  munition  was  determined  to  be  largely  due  to  human 
error.  The  quantification  of  these  events  required  a  detailed  human 
reliability  study  (Ref.  5-15).  Essentially  a  task  analysis  was  per¬ 
formed  to  identify  those  errors  that  could  potentially  Impact  agent 
release  probabilities.  Available  data  was  used  to  quantify  the  proba¬ 
bilities  of  some  of  these  errors  and  extrapolations  were  made  from  these 
fixed  data  to  quantify  the  remainder. 

Isolation  of  leaking  rockets  require  special  tasks.  The  leaking 
rockets  are  isolated  in  the  storage  igloo  at  the  original  location, 
where  the  pallet  containing  the  leaking  rocket  is  unpacked.  Only  those 
rockets  blocking  access  to  the  leaking  rocket  are  removed  and  are  placed 
in  a  holding  fixture.  This  rocket  is  hand-carried  by  a  two-man  team 
wearing  Level  A  protective  clothing  to  the  PIG  (which  has  been  placed 


5-50 


I 

A 


FORKLIFT  TINE 
ACCIDENT 
(INSIDE  IGLOO) 


MUNITION 

INTEGRITY 


AGENT 

RELEASE 

SEQUENCE 


INTACT 


PUNCTURED 


Fig.  5-7.  Munition  punctured  by  forklift  tine  during  leaker 
handling  activities 
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Fig.  5-8.  Munition  dropped  during  leaker  Isolation  operation 
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on  a  plastic  sheet)  and  secured  In  It.  The  handlers  lift  the  decon¬ 
taminated  PIG  by  Its  handles,  carry  It  outside,  and  place  It  on  the 
truck  that  will  carry  It  to  an  Igloo  reserved  for  leaking  munitions 
(Ref.  5-1).  The  analysis  assumes  that  the  same  procedure  Is  followed 
for  Isolating  other  leaking  munitions,  except  that  overpacks  (other  than 
PIGs)  are  used. 

Three  types  of  operator  errors  related  to  leaker  Isolation  were 
Identified  In  the  task  analysis:  (1)  puncturing  a  munition  with  a 
forklift  tine,  (2)  dropping  a  munition  or  pallet  from  a  forklift,  and 
(3)  dropping  a  single  munition  while  hand-carrying  It.  Details  on  these 
handling  errors  are  discussed  In  Section  6  (Handling  Activities). 

Table  5-14  presents  the  data  used  to  evaluate  the  accident  fre¬ 
quencies  for  the  scenarios  addressed  above.  The  frequency  of  scenario 
SLl  was  derived  by  determining  the  leakage  rate  for  each  munition  type 
based  on  the  leaker  data  at  each  site  and  the  total  munition  Inventory 
at  each  site.  Since  the  two  parameters  are  classified  Information,  they 
will  be  presented  and  discussed  further  In  a  classified  appendix. 
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TABLE  5-14 

DATA  BASE  FOR  ANALYSIS  OF  SEQUENCES  SLl,  SL2,  AND  SL9 


Frequency 

1 

Event 

or  Probability 

Reference  i 

Munition  develops  a  leak  during 
storage  (Scenario  SLl): 

Bomb  (TEAD) 

(UMDA) 

4.2-ln.  mortar  (ANAD) 

(PUDA) 

(TEAD) 

105-mm  cartridge  (ANAD) 

(PUDA) 

(TEAD) 

Ton  container 

Mine  (ANAD) 

(PBA) 

(TEAD) 

(UMDA) 

Projectile  (ANAD) 

(LBAD) 

(PUDA) 

(TEAD) 

(UMDA) 

Rocket  (ANAD) 

(LBAD) 

(PBA) 

(TEAD) 

(UMDA) 

Spray  tank 

Forklift  tine  accident  (SL2) 

Munition  puncture  given  tine 
accident : 

Bomb 

4.2-ln.  mortar 
105-inm  cartridge 
Mine 


7.5E-5  per  year  Ref.  5-16 
4.5E-4  per  year 

2.8E-7  per  year 
l.OE-6  per  year 
7.0E-6  per  year 

2.8E-7  per  year 
l.OE-6  per  year 
7.0E-6  per  year 


9.0E-6  per  year 
l.lE-6  per  year 
2.5E-4  per  year 
3.1E-4  per  year 

4.9E-6  per  year 
9.3E-6  per  year 
5.0E-6  per  year 
8.1E-5  per  year 
6.2E-5  per  year 

6.1E-5  per  year 
4.3E-5  per  year 
9.1E-7  per  year 
1.3E-3  per  year 
1.8E-4  per  year 

9.8E-5  per  year 

l.OE-4  per  operator  Ref.  5-17 


1.29E-2  Ref.  5-2 

3.68E-2 

8.90E-3 

7.07E-2 


TABLE  5-14  (Continued) 
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Event 

Frequency 
or  Probability 

Reference 

FroJ ectlle 

5.00E-2 

Rocket 

2.63E-1 

Spray  tank 

1.53E-2 

Munition  dropped  during  leaker 

Isolation  (SL9): 

Pallet  and  bulk  (B,  S) 

3.0E-4 

Human  Reliability 

Single  (C,  D,  M,  P,  Q,  R) 

6.0E-4 

Analysis  (Ref.  5-17) 

Ton  container  (K) 

3.0E-5 

Munition  punctured  given  drop: 

Bomb  (pallet) 

4.72E-4 

Ref.  5-2 

(single) 

1.62E-4 

4.2-ln.  mortar  (pallet) 

1.24E-4 

(single) 

0.0 

105-mm  cartridge  (pallet) 

2.71E-5 

(single) 

0.0 

Ton  container 

1.55E-3 

Mine  (pallet) 

9.27E-5 

(single) 

4.08E-5 

Projectile  (pallet  or  single) 

0.0 

Munition  detonates  given  6  ft 

1 .6E-8/munltlon 

Ref.  5-2 

drop 
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5.4.  SCENARIO  QUANTIFICATION 


Tables  5-15  and  5-16  present  the  results  of  the  accident  scenario 
frequency  analysis  for  all  the  storage  sequences  discussed  previously 
except  those  which  were  Initially  screened  (l.e.,  SLID,  SLU,  SL12, 
SL13,  and  SL14).  From  the  results  It  is  evident  that  the  following 
sequences  could  be  screened  out  further  based  on  the  1.0  x  10“^®/yr 
criterion: 

SL17  -  Large  aircraft  direct  crash;  fire  contained  in 

30  min. 

SL21  -  Large  aircraft  indirect  crash;  fire  contained  in 

30  min. 

SL23  -  Tornado-generated  missiles  cause  munition  detona¬ 

tion  upon  impact. 

Since  handling-related  accidents  are  given  in  terms  of  events  per 
munition  operation,  no  screening  can  be  performed  without  divulging 
classified  information. 


The  trends  indicated  by  the  frequency  results  are  as  follows: 
Externally-Induced  Events 


1.  Tornado  and  high  wind 

a.  Munitions  stored  outdoors  or  in  warehouses  are  generally 
more  susceptible  to  tornado  strikes.  APG,  PBA,  NAAP, 
TEAD,  and  UMDA  have  warehouses.  PBA  and  NAAP  are  in 
Tornado  Zone  I  while  APG  is  in  Tornado  Zone  II  (Zone  I 
has  the  highest  tornado  frequency).  TEAD  and  UMDA  are  in 
Tornado  Zone  III. 


5-56 


SIORAfil  ACCIDCNTS  -  'Frequency  unite  given  et  kottcn  of  teblel 
FOR  miNlItONS  AT  EIISTINS  SITES 


srofiAGE  ACCIbCMIS  -  lErt^utiuy  units  given  nt  botton  o<  tnbld 
FOR  HUNKiOHS  «I  EI1SIIN6  SITES 


ACCIDCNIS  -  (Frequency  uniti  given  et  bottoi  a(  teblel 
FOD  nUNlllOKS  M  FUSIINB  SUES 


SIDRASE  ACtIDENIS  -  lErt^uenty  units  giv^n  »l  bottua  ot  table) 
EOR  nUNlIIONS  AT  EIISTIN6  SITES 


SIORAtE  ACClDCmS  -  iTrt^utci  uitt  fivcfi  <t  kottM  o<  t«klit 
FK  NUMinOMS  AT  EllSTIM  SITES 


STOAAGE  ACCIDCKTS  -  IFrtqutflcy  units  9ivM  at  kottM  o«  taklfl 
FOR  nUNIIIONS  AT  EIISTIN6  SUES 


ajIL'IUlMWUiUVUn 


£  CA 
>  UJ 


r  s 


S  1 


^  s 


s  ^ 


s 

9 


iK  B 


3  ^ 


aj  s 
3  a 


iS 


ui  9B 

In 


«o  M  I 
&  OB  > 
2  tk  I 


is  I 

S!<  I 


ill 

at  Uto  1 

O  o  0  0-90 

^  S  ^  ^  ^ 

ri  <*-<  <N  rJ  C't  *>3 

1 

o>  o*  o  o  o  O 

XO^OOOOO 
*«k  1  T  •»  t  1  1  1 

iitt  1 

S  t 

I 

O  O  ^  o 

f!  ^  «o  K»  1-4 

at  i  : 

0  0  0  9  0  0  0 

3  a  1 

ae  1 

^ 

r'5  P'3  r-5  c-4  ci  c4 

§§  i 

1 

1 

^  f'^  O  03  ^3  OB 

OoOoOOOO 
•««.  1  r  1  t  1  <  1 

^  ^  ^  •m  cS 

C£  1 

at  s  j 

1  1  1  ««  1  (  t  t 

O 

« 

IS  1 

as 

P'4 

< 

IS  I 

jB4KjBO<CjB<B<K 

r'o 

? 


a!  it!  it!  a!  it! 

O'  9«  O'  ^ 

M  ^  ^  M  M 


*  I  I  M  M  t  I  I 


O  O  9  o  <0  o 
^  ^  ^  ^  ^ 


,  .  .•?5?5rrTrrT 

at  a  ss  as  is  a*  a!  af  *  at  at  w  w  *  as  «  as  “  at  *  its  w !«  w  w  w 


t  t 


o  '  o 
^  £ 


I  I  «  I 

o 

£ 


w  “  w  * 


C*  (M 


—  I  I  •  ♦  »  ^  I  I 


O' 

o 

ik 


as !« 

C'i  <*4 


I  I  I  I  I  I  I  I 

o 


«  «  o  9  «  « 


o  «  «  «  >• 
^  *  *  *  laj 


I  I  I  >  I  I  >  I  I  I  I  I 


«  o  oe  <K  «  «c 


«  «s  «  #c 

^  2  al  «  v  K  X 


■O  'O  <s>  o  o 

^  ^  *5  *5  5 

C^  c4  c4  C4 


^  ^ 


Si  54!  *  JJf 

^  t-n 


m 


I  I  I  I  I 


«  «  «  X  « 


CC  «  «C  « 


ooooo  OO  </• 

«««««  ♦♦  ♦♦ 
UikMUibOUJ  UJUrf  tf«  UiUi 

«t  OO 

r4r««  »  OO 


I  I  I 


o  o  o  o  o 

uu  w  hu  ui 

o  o  o  o  o 

o  o  o  o  o 


«  « 

*  5  « 


I  I  I  I  I 
« »« 

o  «r  «r  7  ^ 


a 

4^2*” 


^  ^  i  i  ^  5 


cnu(.j{_j(.JuucjU4^(^r^t/9wuk«_>cncncj)bn(i*tAC_JuUi^i^cj 

2£S£SSSSSS3;sSSli3S;S£SS22esl£SS 

Oisit^iuiSioitJisiSttjifA  tAoiSiotsiciiiAiSioist^OiijitAjiiA 


5-69 


assaaaaaiiKai^^ 


T  ^  J 


.-SI 


I 


•S 

«s 


1 

i 

••i 


a 


i 


^  </i 

a  i  %  3 

«  3  £ 

w  a 


i  S  iS  I 

•ae  —  «  « 


OOOOO  •r-O''.  £*0 


kAi  W  M  MJ 

f*«  CD  S  ~ 


in^^oo  o  iOrf*»^9a> 

'OO-*—  —  0-9000 

'  ui  \aJ  laj  hAj 

^  ^  ^  ^  ^  ^  ^  rw  ^  1^ 

CD 


S  S  S  o  o  o 


s: 


^  ^  ^  ^  o 

O  O  O  o  o 

^  M  ^  ^ 


— •r'***'»*n 


SS2::-- 

r<M  rs*  ai  o  a>  QD 


•■'  v:.v 


IS 

ij^ 

!§f 


TABLE  5-16  (Continued) 


Meteorite  strike 


a.  Munitions  stored  in  warehouses  are  more  susceptible  to 
meteorite  strikes.  Since  fire  is  generally  present,  a 
meteorite  strike  may  involve  the  entire  warehouse 
inventory. 

Aircraft  crashes 

a.  Munitions  stored  outdoors  are  generally  more  susceptible 
to  these  events  than  those  stored  indoors.  APG,  PBA,  and 
T£AD  have  ton  containers  stored  outdoors  and  the  aircraft 
crash  probabilities  at  these  sites  are  relatively  high 
compared  to  the  other  sites. 

b.  Igloos  provide  minimal  protection  from  direct  crashes  of 
large  aircraft.  The  accident  becomes  more  serious  when 
burstered  munitions  are  involved. 

c.  Large  aircraft  crash  frequencies  at  APG,  LEAD,  and  TEAD 
greatly  increase  for  the  air  option  because  of  the  addi¬ 
tional  landings  and  takeoffs  at  these  sites. 

Earthquakes 

a.  Earthquakes,  particularly  in  high  seismic  locations  such 
as  TEAD,  could  cause  stacked  munitions  to  be  punctured. 
However,  the  probability  of  having  a  probe  present  inside 
an  igloo  is  quite  low. 

b.  Detonations  due  to  earthquake-induced  drops  are  at  least 
two  orders  of  magnitude  less  likely  than  punctures. 


c.  There  is  a  significantly  high  frequency  earthquake- 

induced  agent  releases  to  munitions  stored  In  warehouses 
at  NAAP,  TEAD,  and  UMDA. 

Leaker-Related  Events 

1.  Forklift  drop  accidents  can  occur  more  frequently  than  fork¬ 
lift  time  punctures. 

2.  Use  of  a  lifting  beam  Instead  of  a  tine  leads  to  an  order  of 
magnitude  decrease  In  drop  frequency. 


5.5.  UNCERTAINTY  ANALYSIS 

5.5.1.  Overview 

The  frequency  results  presented  In  Tables  5-15  and  5-16  are  median 
values.  The  values  shown  In  the  range  factor  column  represent  the 
ratios  of  the  95^^  percentile  values  to  the  median  values.  The  range 
factors  vary  from  10  to  almost  100.  The  tornado  frequency  results  have 
the  highest  uncertainties,  largely  because  of  the  difficulty  to  accu¬ 
rately  model  the  probability  that  the  missile  will  be  In  the  proper 
orientation  to  penetrate  the  munition  and  how  many  missiles  per  square 

foot  of  i^nd  will  actually  be  present.  The  ability  to  modal  low-impact 

* 

detonations  also  leads  to  large  uncertainties  In  the  final  results.  The 
data  available  are  scarce  and  sometimes  not  directly  applicable  to  the 
scenario  being  analyzed. 

5.5.2.  Error  Factors 

In  those  cases  where  sufficient  Information  exists  to  determine  the 
upper  and  lower  bound  values,  the  error  factor  was  derived  by  assuming 
that  the  upper  bound  value  Is  equivalent  to  the  95^^  percentile.  The 
engineers’  best  estimate  Is  taken  as  the  median  value  based  on  the  prop¬ 
erties  of  the  lognormal  distribution.  This  choice  Is  rather  conserva¬ 
tive,  since  the  mean  value  of  the  resulting  distribution  becomes  larger 
than  the  best  estimate  or  recommended  value. 

In  many  cases,  however,  the  data  sources  were  limited.  Therefore, 
the  assignment  of  error  factors  was  entirely  based  on  engineering  Judg¬ 
ment,  taking  Into  consideration  the  Important  parameters  which  may 
Influence  a  particular  variable.  The  generic  guidelines  for  the  uncer¬ 
tainty  assessment  Is  shown  In  Table  5-17. 

5.5.2. 1.  Tornado  Sequence  Uncertainties.  The  frequency  of  the  ini¬ 
tiating  event  Itself  (l.e.,  tornado  wind  of  sufficient  Intensity  to 
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TABLE  5-17 

GENERIC  UNCERTAINTY  MODELS 


External  events  (both  from  natural  causes  and  human-caused 
events  external  to  the  operation,  e.g.,  aircraft  crash): 

EF  -  10. 

Con^onent  or  equipment  failure  rates  were  generally  assigned 
an  error  factor  of  3.  An  exception  to  this  rule  Is  when  the 
analyst  does  not  feel  confident  with  the  applicability  of  the 
data  to  a  particular  demll  equipment,  conq>onent,  or  operation. 
In  such  case,  a  larger  error  factor  was  used,  ranging  from  5 
to  10. 

In  cases  where  the  event  probability  range  from  0.1  to  0.9, 
and  was  derived  largely  from  engineering  Judgment,  the  error 
factor  used  1st 

Probability:  0.1  to  0.3  EF  -  2.0 

Probability:  0.4  to  0.6  EF  •  1.5 

Probability:  0.7  to  0.8  EF  ■  1.4 

Probability:  0.9  EF  -  1.0 

Munition  failure  probability  due  to  puncture  that  was  calcu¬ 
lated  using  standard  mathematical  models  was  assigned  an  error 
factor  of  5. 
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generate  missiles  occurs)  is  assigned  an  error  factor  of  10,  per 
Table  5-17.  The  conditional  probability  of  a  missile’s  hitting  the 
structure  and  penetrating  the  munition  is  assigned  an  error  factor 
of  50.  As  explained  in  Section  5.2. 1.1  (Eq.  5-2),  this  event  is  the 
product  of  four  variables.  The  uncertainty  is  largely  due  to  the 
variable  which  is  the  number  of  missiles  per  square  foot  of  wind. 
The  conditional  probability  of  a  burstered  munition’s  detonating  when 
hit  by  a  missile  is  assigned  an  error  factor  of  2. 


5. 5. 2. 2.  Meteorite  Strike  Sequence  Uncertainty.  The  frequency  of  a 
meteorite  strike  is  assigned  an  error  factor  of  10.  The  conditional 
probability  of  a  meteorite’s  penetrating  and  rupturing  the  munition  is 
the  product  of  (1)  fraction  of  stone  and  iron  meteorites  capable  of 
penetrating  the  target;  (2)  target  area;  and  (3)  spacing  factor.  This 
event  is  assigned  an  error  factor  of  10.  The  uncertainty  is  largely  due 
to  the  fraction  of  stone  and  iron  meteorites  capable  of  penetrating  the 


structure. 


5. 5. 2. 3.  Aircraft  Crash  Sequence  Uncertainties.  The  aircraft  crash 


frequency  is  assigned  an  error  factor  of  10.  Aircraft  crash  accident 
sequences  with  or  without  fires  (from  impact)  have  been  considered.  For 
this  reason  no  uncertainties  were  assigned  to  either  the  probability  of 
having  a  fire  (0.45)  or  no  fire  (0.55).  The  uncertainties  associated 
with  the  structural  damage  (i.e.,  igloo  or  warehouse)  given  an  aircraft 
crash  are  given  in  Table  5-9.  For  events  with  probabilities  greater 
than  0.1,  the  uncertainties  assigned  follovred  the  guidelines  given  in 
Table  5-17. 


5 . 5 . 2 . 4 .  Earthquake  Sequence  Uncertainties 


Storage  Igloos 


The  Initiating  event,  earthquake  occurs,  is  assigned  an  error 
factor  of  10.  The  conditional  event,  munition  punctured  given  a 
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drop,  is  assigned  an  error  factor  of  5.  The  puncture  probability  is 
a  function  of  drop  height,  weight  and  pressure  of  a  probe  of  sufficient 
length  and  density.  The  uncertainty  is  largely  due  to  the  last  vari¬ 
able.  Note  also  that  no  uncertainty  from  errors  with  the  models  has 
been  considered,  since  this  is  beyond  the  state-of-the-art  of  present- 
day  uncertainty  analysis. 

Warehouse  Storage 

Event  1 ;  Earthquake  Occurs 

The  initiating  event  frequency  is  assigned  an  error  factor  of  10. 

Event  2 ;  "K"  Warehouses  Damaged  by  Earthquake 

Uncertainty  factors  for  values  above  0.1  are  taken  from  Table  5-17. 
For  probabilities  between  0.01  and  0.1,  an  uncertainty  factor  of  3  is 
recommended.  Probabilities  below  10"^  are  assigned  an  uncertainty 
factor  of  3.  The  uncertainty  distribution  in  each  case  is  lognormal 
with  a  median  equal  to  Recall  that  ?£  is  the  Independent  warehouse 

damage  probability,  given  an  earthquake. 

Event  3 ;  Munitions  Damaged  in  "L"  Warehouses 

If  munition  damage  results  from  building  collapse,  the  uncertainty 
in  Event  3  is  negligible  because  the  analysts  are  very  confident  (i.e., 
essentially  certain)  that  munition  damage  occurs.  If  the  warehouse 
remains  intact,  the  uncertainty  in  Event  3  is  dominated  by  the  uncer¬ 
tainty  in  Pp  -  the  conditional  probability  that  a  fallen  container  is 
punctured.  From  Table  5-17  the  uncertainty  distribution  is  lognormal 
with  an  uncertainty  factor  of  5  and  a  median  equal  to  the  point  estimate 


Event  A;  Ignition  at  "M"  Warehouses 

The  ignition  probability  is  a  function  of  P^gp  and  that  is, 

the  probability  that  offsite  power  is  available  following  the  quake,  and 
that  an  electrical  fault  occurs.  The  uncertainty  in  these  probabilities 
was  quantified  using  the  methodology  reported  in  the  Zion  PRA.  More¬ 
over,  the  data  used  to  quantify  the  uncertainty  in  P^gp  also  comes  from 
the  Zion  study. 

The  major  uncertainty  in  P£^  is  due  to  the  application  of  a  generic 
Modified  Mercalli  fragility  model  to  the  warehouses.  Depending  upon  the 
actual,  as-built  design  features,  the  median  failure  threshold  can  vary 
by  a  factor  of  2  about  the  nominal  value.  Thus,  an  uncertainty  factor 
of  2  was  applied  to  the  uncertainty  in  the  failure  threshold. 

Event  5 ;  Ignition  at  Warehouse  with  Damaged  Munitions 

All  parameters  and  distributions  required  to  quantify  the  uncer¬ 
tainty  in  Event  5  are  presented  In  the  Event  4  analysis. 

5. 5. 2. 5.  Handling  Accident  Sequence  Uncertainties.  All  initiating 
events  associated  with  munitions  handling  (l.e.,  drops,  collisions, 
forklift  tine  punctures)  were  assigned  an  error  factor  of  10.  The  con¬ 
ditional  probability  of  puncturing  the  munitions  given  any  one  of  the 
initiating  events  is  assigned  an  error  factor  of  3.  The  probability 
of  causing  a  low-impact  detonation  (l.e.,  drop  from  6  ft  or  lower)  is 
assigned  an  error  factor  of  10. 
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6.  SCENARIO  LOGIC  MODELS  FOR  HANDLING 


The  objectives  of  this  section  are  to:  (1)  define  those  activ¬ 
ities  considered  as  "handling"  In  the  analysis;  (2)  address  the  assump¬ 
tions  and  data  that  have  been  used  to  evaluate  the  handling  accident 
scenarios;  (3)  present  the  analytical  structure  of  the  evaluation;  and 
(4)  discuss  the  quantification  of  the  accident  scenarios. 

Section  3  provides  an  overview  of  how  munitions  are  handled  at  the 
site  prior  to  the  demilitarization  operations.  The  activities  asso¬ 
ciated  with  the  handling  of  munitions  at  each  disposal  site  are  dia¬ 
gramed  In  overview  form  In  Fig.  3-1.  In  brief,  the  Army’s  plan  Is  to 
package  the  munitions  In  onsite  transportation  containers  when  moving 
them  from  the  storage  areas  to  the  MDB.  The  onsite  transportation  con¬ 
tainer  Is  Identical  to  the  one  used  In  the  collocation  option.  Spray 
tanks  will  be  transported  In  their  overpack  only,  which  serves  the  same 
function  as  the  onsite  container  for  the  other  munitions.  Handling 
operations  Include  packaging  and  loading  at  the  storage  location  and  at 
the  disposal  facility  unpackaging  the  transport  containers,  and  transfer 
of  the  munitions  to  the  materials  handling  equipment  within  the  plant. 
For  this  study,  movement  by  forklifts  Is  considered  to  be  a  handling 
operation  rather  than  transportation.  However,  onsite  truck  transpor¬ 
tation  Is  considered  a  transportation  operation. 

6.1.  GENERAL  HANDLING  PROCEDURES  AND  ASSUMPTIONS 

Although  there  imay  be  soime  slight  differences  In  the  munition 
handling  procedures  at  each  site,  for  this  analysis  the  following 
general  assumptions  were  made  and  are  Intended  to  apply  to  all  the 
sites,  as  appropriate: 
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Forklifts  ace  used  to  move  munition  pallets  for  short  dis¬ 
tances.  Electric  forklifts  are  used  inside  storage  igloos, 
warehouses,  maintenance  facilities,  storage  facilities,  MHIs, 


or  MDBS.  Fossil  fueled  forklifts  are  used  outside  these 


facilities. 


2.  A  forklift  will  handle  one  pallet  or  container  at  a  time. 


3.  A  forklift  equipped  with  a  lifting  beam  is  used  to  move  and 
carry  the  ton  containers. 


4.  Ton  containers  will  have  been  tested  ultrasonlcally  to  deter¬ 
mine  susceptibility  to  leak  development  in  the  plug  and  valve 
area  during  transportation.  The  ton  containers  indicating 
potential  leak  development  will  have  both  their  valves  and 
plugs  replaced  with  plugs.  The  handling  activities  associated 
with  these  operations  are  considered  "preparatory"  procedures 
and  are  not  part  of  this  risk  analysis.  Further,  it  is 


assumed  that  the  ton  container);  will  not  leak  thereafter  and 


this  analysis  does  not  address  handling  of  leaking  ton 


containers. 


5.  Mines  will  be  transported  with  their  fuzes  still  in  the  drums. 


The  spray  tanks  and  Weteye  bombs  will  not  be  removed  from 
their  overpack  and  will  not  be  placed  in  onsite  transportation 


containers.  These  items  are  handled  with  forklifts  with 


tines. 


7.  Munitions  will  be  placed  in  an  onsite  transportation  container 
positioned  Just  outside  the  storage  facility  (igloo  apron, 
warehouse,  or  storage  yard*s  entrance)  using  forklifts. 


M 
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8.  The  onsite  container  has  a  thickness  equivalent  to  0.375-ln. 
steel  and  Is  designed  to  provide  the  munitions  with  protection 
from  lnq>act,  crush,  puncture,  and  fire. 

9.  The  onsite  containers  are  not  handled  with  forklifts  with 
tines  but  with  handling  equipment  which  lifts  the  containers 
from  the  top,  such  as  a  forklift  with  lifting  beams. 

10.  The  onsite  containers  will  be  loaded  onto  a  truck  by  forklift 
for  transfer  to  the  MHI. 

11.  Upon  arrival  at  the  MHI,  the  onsite  container  Is  unloaded  from 
the  truck  using  a  diesel  forklift  which  takes  the  container  to 
the  Igloo  apron.  An  electric  forklift  transfers  the  container 
to  the  MHI  where  It  Is  stored  until  such  time  when  It  can  be 
moved  to  the  MDB  for  processing. 

12.  Spray  tanks  arriving  at  the  MHI  In  their  overpacks  are 
unloaded  from  the  truck  using  a  diesel  forklift  with  tines. 

An  electric  forklift  (with  tines)  brings  them  Inside  the  MHI 
where  they  are  stored  like  the  onsite  containers. 

13.  VRien  the  munitions  are  ready  to  be  moved  to  the  MDB,  an 
electric  forklift  moves  one  onsite  container  (or  one  spray 
tank  In  Its  overpack)  outside  the  MHI.  A  diesel  forklift 
picks  up  the  container  and  carries  It  to  the  MDB  entrance. 

14.  Munitions  that  are  found  to  be  leaking  upon  arrival  at  the  MHI 
will  be  transferred  to  a  separate  location.  The  logistics  for 
leaker  transfer  have  not  been  defined.  Therefore,  this 
activity  has  not  been  addressed  In  this  risk  analysis. 


6.2.  CHRONOLOGY  OF  HANDLING  OPERATIONS 


The  handling  operations  were  categorized  primarily  Into  two  groups: 
(1)  handling  operations  (HO)  between  the  storage  facilities  and  the  MHI 
and  (2)  handling  operations  at  the  facility  (HF),  Including  movement 
from  the  MHI  to  the  MDB  entrance  and  then  to  the  UPA.  A  third  category 
of  handling  operation  was  also  considered:  Handling  at  the  Igloo  prior 
to  onsite  transport  to  the  MHI  and  unloading  at  the  MHI.  These  opera¬ 
tions  served  as  the  basis  for  the  Identification  of  relevant  handling 
accident  Initiating  events  presented  In  Section  4. 

The  generic  handling  operations  required  for  movement  of  these 
munitions  are  shown  on  Fig.  3-1.  The  general  handling  steps  are  as 
follows : 

1.  An  electric  forklift  picks  up  a  pallet  of  munitions  Inside  the 
storage  area  and  places  it  in  an  onsite  transportation  con¬ 
tainer  positioned  Just  outside  the  storage  facility  (Igloo 
apron,  warehouse,  or  storage  yard’s  entrance).  Two  exceptions 
are  the  spray  tanks  and  Weteye  bombs  which  are  not  placed  In 
an  ONC  but  which  are  handled  in  their  overpacks  using 
forklifts. 

2.  The  onsite  container  Is  loaded  on  a  truck  using  handling 
equipment  which  lifts  the  container  from  the  top,  such  as  a 
lifting  beam.  Overpacks  are  also  loaded  on  the  truck  with 
forklifts . 

3.  The  truck  transports  the  container  or  overpacks  to  the  MHI. 

4.  Upon  arrival  at  the  MHI,  the  onsite  container  or  overpacks  are 
unloaded  from  the  truck  using  a  diesel  forklift  which  takes 
the  container  to  the  Igloo  apron. 


5.  An  electric  £orkll£t  trans£ers  the  container  to  the  MHI  where 
It  Is  stored  until  such  time  when  It  can  be  moved  to  the  MDB 
£or  processing. 

6.  Vlhen  ready  £or  £urther  processing,  an  electric  £orkll£t  picks 
up  the  container  Inside  the  MHI  and  brings  It  to  the  MHI 
apron. 

7.  A  diesel  £orkll£t  picks  up  the  container  at  the  MHI  apron  and 
carries  It  to  the  MDB  elevator  where  It  Is  taken  to  the  second 
level. 

8.  An  electric  £orkll£t  takes  the  container  out  of  the  elevator 
and  moves  It  to  the  UFA. 

Based  on  these  handling  procedures,  the  number  o£  operations  for  each 
scenario  Is  calculated. 

As  noted  above,  spray  tanks  and  Weteye  bombs  are  not  placed  Inside 
an  onsite  transportation  container  but  are  handled  Inside  their  over¬ 
packs  with  a  £orkll£t  with  tines.  At  the  storage  area,  an  electric 
£orkll£t  with  tines  picks  up  these  munitions  In  their  overpack  and  loads 
them  directly  onto  a  truck  awaiting  Immediately  outside  the  storage 
area.  At  the  MHI,  the  spray  tanks  or  Weteye  bombs  (In  their  overpacks) 
are  unloaded  £rom  the  truck  and  stored  Inside  the  Igloo  In  a  manner 
similar  to  the  onsite  transportation  containers.  The  handling  steps  are 
Identical  to  those  described  £or  all  other  munitions  (Fig.  3-1). 


6.3.  ACCIDENT  SCENARIOS  FOR  ONSITE  AND  FACILITY  HANDLING 

According  to  the  Master  Logic  Diagram  (Section  A),  there  were  three 
types  of  Initiating  events  which  could  lead  to  agent  release:  munition 
drop,  forktlne  puncture,  and  forklift  collision.  The  list  was  further 
expanded  to  specific  accident  sequences  to  address  conditions  such  as 
(1)  where  the  accident  occurs  (l.e.,  storage  area,  MHI,  eLc.);  (2)  muni¬ 
tion  configuration  (l.e.,  handled  as  pallets  or  singularly);  and  (3)  the 
presence  of  any  packaging  (l.e.,  bare  or  In  onsite  transportation  con¬ 
tainer).  This  resulted  In  the  Identification  of  five  families  of  Ini¬ 
tiating  events  for  handling,  as  given  In  Table  A-3. 

Event  tree  logic  models  were  developed  for  these  five  families  of 
Initiating  events,  as  shown  In  Figs.  6-1  through  6-5.  For  each  tree, 
the  scenario  begins  with  the  disruptive  occurrence  at  a  specified  loca¬ 
tion  and  munition  configuration;  the  subsequent  events,  which  affect 
whether  or  not  agent  Is  released  or  how  much  Is  released,  were  then 
developed. 


The  Initiating  events  for  the  accident  scenarios  evaluated  are 
largely  due  to  operator  error.  Except  for  forklift  collision  accidents 
In  which  the  frequency  data  used  was  derived  from  Industry  data  which 
already  Incorporated  human  error  contribution  to  the  overall  event  fre¬ 
quency,  a  human  reliability  task  analysis  was  performed  as  described 
below  to  determine  the  occurrence  of  such  events  as  dropping  of  muni¬ 
tions,  forklift  tine  accidents,  etc.  The  forklift  collision  frequency 
Is  A. 3  X  10"®  per  operation. 

The  event  tree  sequences  for  the  onsite  handling  operations  (HO) , 
related  to  the  movement  of  munitions  to  various  locations,  are  coded 
differently  from  those  at  the  demilitarization  facility  (HF) .  The  com¬ 
plete  list  of  sequences  Is  shown  In  Table  6-1.  For  facility-related 


Event  tree  for  vehicle  collisions  during  handling  at  facility 


Fig.  6-5.  Event  tree  for  vehicle  collisions  during  handling  other  than 
at  facility 


TABLE  6-1 

ACCIDENT  SCENARIOS  (HO  AND  HF) 
ONSITE  DISPOSAL  OPTION 
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handling  operations  (HF) ,  13  sequences  were  Identified  and  are  shown  In 
Table  6-1.  The  applicability  of  these  sequences  to  the  specific  muni¬ 
tions  stored  at  each  site  is  also  shown  in  Table  6-1. 


6.3.1.  Human-Reliability  Analysis  for  Handling  Operations 

A  human-reliability  analysis  (HRA)  was  performed  In  support  of  the 
handling  operations  analysis.  This  section  discusses  the  objective  of 
the  HRA,  the  methodology  used,  the  task  analysis  performed,  the  errors 
described,  and  the  quantification  of  those  errors. 

6.3. 1.1.  Objective.  The  objective  of  the  human-reliability  analysis  of 
the  munitions  handling  operations  Is  to  Identify,  define,  and  quantify 
operator  errors  that  could  lead  to  agent  release  to  the  environment. 

The  handling  operations  examined  consist  of  all  handling  activities  that 
take  place  before  the  demilitarization  operations.  These  Include  all 
activities  involving  loading  and  unloading  munitions,  moving  munitions 
with  forklifts*  and  by  hand,  and  packing  and  unpacking  munition  pallets. 
The  equipment  and  personnel  involved  and  the  order  in  which  the  events 
occur  are  based  on  site  visit  observations,  telephone  conversations,  and 
reviews  of  documents  Including  "Transportation  of  Chemical  Agents  and 
Munitions:  A  Concept  Plan"  (Ref.  6-1)  and  the  list  of  GA’s  handling 
assumptions  (Ref.  6-2). 

6.3. 1.2.  Methodology.  The  approach  used  for  the  human-reliability 
analysis  is  similar  to  the  one  used  for  plant  operations  (described  in 
Plant  Operations,  Section  7).  First,  a  task  analysis  was  performed  to 
identify  those  errors  that  could  potentially  Impact  agent  release 


*For  this  study,  forklifts  and  other  rubber-tire  vehicles 
performing  the  same  functions  as  forklifts  are  referred  to  as  forklifts, 
and  no  difference  in  the  error  probabilities  assigned  to  these  various 
vehicles  is  assumed. 


probabilities.  Those  errors  were  categorized  according  to  the  human 
operations  Involved;  usually,  no  munition-specific  differences  were 
cited.  Available  data  were  used  to  quantify  the  probabilities  of  some 
of  these  errors,  and  extrapolations  were  made  from  these  fixed  data  to 
quantify  the  remainder.  Conservative  error  factors  were  selected  to 
account  for  the  uncertainty  associated  with  the  data,  the  models,  the 
extrapolations,  and  site-specifics. 

6.3. 1.3.  Task  Analysis.  A  task  analysis  was  performed  to  Identify 
credible  human  errors  associated  with  the  handling  operations.  The 
sequence  of  handling  events  related  to  onsite  disposal  on  which  this 
task  analysis  was  based  Is  described  In  Sections  6.1  and  6.2. 

Figure  3-1  schematically  represents  the  various  handling  steps.  Sec¬ 
tion  9.2  contains  the  task-analysis  table  that  shows  precisely  which 
human  errors  were  Identified  as  applicable  to  each  operation. 

All  of  the  handling  operations  analyzed  are  performed  with  fork¬ 
lifts  or  by  hand.  Electric  forklifts  are  used  Inside  storage  Igloos, 
warehouses,  storage  facilities,  MHIs  and  MDBs  to  move  single  munitions 
and  pallets  between  the  Inside  of  the  building  and  Its  apron  or  loading 
dock.  Diesel  forklifts  are  used  for  moving  single  munitions,  pallets, 
and  transportation  containers  between  the  apron  or  loading  docks  and 
trucks  and  for  movement  elsewhere  outside.  Larger  forklifts,  referred 
to  as  container  handling  equipment  (for  exan^le,  a  "plggypacker" ) ,  are 
used  to  move  transport  containers.  Forklift  tines  are  used  to  lift 
pallets  and  spray  tanks  Inside  their  overpacks.  Forklift  lifting  beams 
are  used  to  lift  ton  containers  and  transportation  containers. 

6.3.1. A.  Human-Error  Description.  Four  types  of  operator  errors  were 
Identified  In  the  task  analysis:  (1)  puncturing  a  munition  with  a  fork¬ 
lift  tine,  (2)  dropping  a  munition  or  pallet  from  a  forklift,  (3)  drop¬ 
ping  a  single  munition  while  hand-carrying  it,  and  (A)  damaging  a 


munition  or  munitions  in  a  forklift  collision.  These  errors  are 
described  in  the  following  paragraphs: 

1.  Puncturing  a  munition  with  a  forklift  tine  might  occur  any 
time  a  munition  or  pallet  is  approached  with  a  forklift  tine. 
Puncture  probability  is  a  function  of  the  human  error  that 
results  in  intact  of  the  tine  with  the  munition  and  of  the 
vulnerability  of  the  munition  to  such  an  impact. 

2.  Dropping  a  munition  or  pallet  from  a  forklift  could  occur  any 
time  a  forklift  is  carrying  a  load  (single  munitions,  pallets, 
TCs,  spray  tanks,  package  containers,  etc.).  This  action 
could  be  caused  by  operating  the  forklift  In  a  way  that  causes 
the  load  to  fall  or  by  loading  the  forklift  such  that  the  load 
is  misaligned  or  the  weight  distribution  within  the  pallet  or 
the  package  container  Is  unbalanced.  It  could  also  result 
from  the  pallet’s  getting  caught  on  and  pulled  off  by  some¬ 
thing  it  has  run  into.  Sudden  acceleration  or  deceleration, 
sharp  turns,  high-speed  operation,  or  operation  over  uneven 
ground  could  all  be  contributors  to  munition  drops. 

3.  Dropping  a  munition  while  hand-carrying  it  may  occur  any  time 
the  munition  la  picked  up,  put  down,  or  carried  without  using 
a  forklift  or  other  lifting  device.  It  could  be  caused  by  the 
operator’s  falling  as  he  carries  the  munition  or  by  the  muni¬ 
tion’s  slipping  from  his  grasp. 

A.  A  forklift  colliding  with  another  vehicle  or  with  a  fixed 

structure  Is  a  credible  human-error  event,  since  a  human  Is  at 
the  controls  at  the  time  of  the  collision.  However,  the  data 
available  does  not  distinguish  between  collisions  caused  by 
human  error  and  those  caused  by  mechanical  failure.  Since  the 
two  are  accounted  for  in  the  collision  probability  estimate, 


the  human-error  factor  will  not  be  counted  again  by  quantify¬ 
ing  It  separately  In  the  human-reliability  analysis. 

6.3. 1.5.  Human  Error  Probability  Estimation.  Section  9.2  discusses  the 
human  error  probability  estimation  for  the  handling  accidents.  Most  of 
these  estimates  are  based  on  Ref.  6-3. 

6.3.2.  Data  and  Results 

Tables  6-2  and  6-3  present  the  Input  data  used  for  the  accident 
frequency  analysis.  The  basis  for  the  Initiating  events  frequencies  has 
been  discussed  In  the  Human  Reliability  Analysis  Section.  Given  the 
Initiating  event,  additional  events  have  to  occur  to  cause  an  agent 
release  to  the  environment.  The  mechanisms  for  release  could  be  the 
breaching  of  munitions  by  puncture,  li!q>act,  or  detonation  because  of 
some  undue  force.  If  the  accident  Involves  a  fire  (e.g.,  collisions), 
thermal  detonation  of  burstered  munitions  or  hydraulic  rupture  of 
nonburstered  munitions  Is  possible  If  the  fire  Is  not  suppressed.  For 
accidents  ^Ich  occur  In  the  UFA  (some  HF  scenarios),  failure  of  the 
ventilation  system  Is  critical  to  the  amount  of  agent  released  to  the 
environment . 

Puncture  Probability.  The  probability  of  puncturing  a  munition 
whether  It  Is  Inside  or  outside  a  transportation  container  has  been 
evaluated  based  on  a  puncture  model  that  Is  a  function  of  the  probe 
density  and  length,  the  possible  number  of  such  probes  In  the  area,  the 
munition  size  and  configuration,  and  drop  height.  Details  of  this  model 
are  discussed  In  Appendix  C. 

Munition  Detonation.  The  probability  of  a  bare  munition  detonat¬ 
ing  when  dropped  from  a  height  of  6  ft  (equivalent  to  a  collision  at 
13.5  n^h)  Is  assumed  to  be  9.5  x  10“®/munitlon.  For  a  4-ft  drop,  the 
corresponding  probability  Is  3.2  x  The  probability  of  a  munition 


TABLE  6-2 

INITIATING  EVENTS  FREQUENCIES 


INITIATING  EVENT 

FREQUENCY 

ERROR 

REFERENCE  APPLICABLE 

EVENTS/OP 

FACTOR 

SCENARIO 

HEIO 

Pallet  or  single  itea  dropped  during 

H01,H0S,H011, 

handling  of  non-leaking  nunition 
outside  the  HDB  (1) 

H022,HF1,HF11 

HEIOA 

Itens  lifted  with  tines 

3.0E-05 

10.0 

HEIOB 

Itens  lifted  with  lifting  bean 

3.0E-0A 

10.0 

HE13 

Pallet  or  container  dropped  during 
handling  of  non-leaking  nunition 
inside  the  HDB  (2) 

HFa,HF13 

HE  ISA 

Itens  lifted  with  tines 

1.3E-04 

10.0 

HEISB 

Itens  lifted  with  lifting  bean 

l.SE-OS 

10.0 

HE2S 

Single  nunition  dropped  inside 
the  HOB  (4) 

3.0E-04 

10.0 

HF2,HF12 

HE40 

Forklift  tine  accident  involving 
nunition  handling  outside  the  NOB  (1) 

l.OE-OS 

10.0 

H03,HF4 

HE43 

Forklift  tine  accident  involving 
nunition  handling  inside  the  HDB  (2) 

3.0E-05 

10.0 

HF9 

HESS 

Vehicle  collision  accident 

4.3E-')6 

10.0  6A  derived  H02,H04,H06,N07, 

data,  see  H012,H024,H0Z&, 
details  in  HF3,HF5,HF7,HF10,HF14 
Appendix  F 


N0TE3; 

U)  Handled  by  forklift  or  other  handling  equipnent;  operators  nearing  street  clothes  with  task  slung 

12)  Handled  by  forklift;  operators  wearing  task,  gloves,  and  boots;  excluding  ton  container 

(4)  Handled  singly  by  hand;  operators  wearing  aask,  gloves  and  boots. 

(h)  3.0e-5  «  3»l0-5 

<7)  For  all  itens  lifted  with  tines  (spray  tanks  in  overpack  and  bare  aunitions) 

(8)  Itens  lifted  by  a  lifting  bean  or  by  a  cargo  handling  equipnent  (Ton  Container,  transportation  con 


TABLE  6-3 

CONDITIONAL  EVENTS  PROBABILITIES 


EVENT  SEQUENCE 

EVENT 

ERROR 

REFERENCE  APPLICABLE 

PROBABILITY 

FACTOR 

SCENARIO 

HEIOO 

Palletized  or  single  lunition 
punctured  given  a  drop  outside 
the  HOB  (Drop  ht  >  BTt.) 

HOI 

HE  1008 

Boab 

1.02E-03 

3.0  See  6a  calc 

HEIOOD 

4.2-in  Hortar 

2.B7E-04 

3.0  sheets 

HEIOOC 

lOS-aa  Cartridge 

4.73E-05 

3.0  (Ref.  ) 

NEIOOK 

Ton  Container 

3.34E-03 

3.0 

NEIOON 

Nine  (in  druas) 

2.00E-04 

3.0 

HEIOOP 

ISS-M  Projectile 

O.OOE^OO 

HE  1000 

8-in  Projectile 

O.OUE+00 

HEIOOR 

Rocket 

7.95E-04 

3.0 

HEIOOSN  Spray  Tank  (tiith  overpack) 

8.WE-03 

3.0 

HE  110 

Container  and  lunition  punctured  given 

H0S,H06, 

a  drop  oT  the  onsite  container  (4Tt  drop) 

HFl 

HE  HOB 

Boab 

3.3E-04 

3.0 

HEllOO 

4.2-in  Mortar 

3.5E-d4 

3.0 

HE  HOC 

lOS-aa  Cartridge 

4.0E-05 

3.0 

HEHOK 

Ton  Container 

7.2E-04 

3.0 

HEHON 

Mine  (in  druas) 

4.8E-04 

3.0 

HEHOP 

153-aa  Projectile 

6.0E-05 

3.0 

HEHOQ 

8-in  Projectile 

B.OE-05 

3.0 

HEHOR 

Rocket 

2.7E-04 

3.0 

HE  140 

Palletized  or  single  aunition 
punctured  given  a  drop  resulting 

Troa  collision  (Drop  ht  »  2ft. > 

H02,H04 

HE1408 

Boab 

3.94E-04 

3.0 

HE 1400 

4.2-in  Mortar 

1.87E'04 

3.0 

HE140C 

lOS-aa  Cartridge 

4.37E-06 

3.0 

HEHOK 

Ton  Container 

l.b8E-D3 

3.0 

HE140H 

Mine  (in  druas) 

I.BmE-04 

3.0 

HE  MOP 

15S-aa  Projectile 

O.OOE+00 

HE  1400 

8-in  Projectile 

O.OOE+00 

TABLE  6-3  (Continued) 


HE14vfl 

Rocket 

7.1SE-04 

3.0 

HE140S4  Spray  Tank  (nitti  overpackl 

S.31E-03 

3.0 

HE130 

Palletized  aunition  in  onsite 
container  punctured  given  a  drop  during 
handling  in  tlie  UPA  (Drop  ht  >  Alt.) 

NEISOB 

Bonb 

3.5E-04 

3.0 

HE150D 

4.2-in  Mortar 

3.5E-04 

3.0 

HEISOC 

103-11  Cartridge 

4.0E-05 

3.0 

HEISOK 

Ton  Container 

7.2E-04 

3.0 

HEison 

Mine  (in  druas) 

4.8E-04 

3.0 

HEISOP 

lS3-aa  Projectile 

S.OE-05 

3.0 

HEISOO 

8-ifl  Projectile 

S.OE-05 

3.0 

HElSOft 

Rocket 

2.7E-04 

3.0 

HEUO 

Palletized  or  single  aunition  in  onsite 
container  punctured  given  drop  resulting 
Froi  collision  (Drop  ht  »  2ft.) 

HEtiOa 

Boab 

l.OE-04 

3.0 

HEISOO 

4.2-in  Mortar 

3.0E-04 

3.0 

HEISOC 

103-aa  Cartridge 

O.OE+00 

3.0 

HEISOK 

Ton  Container 

3.3E-04 

3.0 

HEISOH 

Mine  (in  druas) 

4.4E-04 

3.0 

HEISOP 

153-ta  Projectile 

O.OE+00 

HEISOQ 

8-in  Projectile 

O.OE+00 

HEtSOR 

Rocket 

2.SE-04 

3.0 

HE2S0 

Single  bare  aunition 
punctured  given  drop  in  UPft 
(Drop  ht  »  4ft.) 

HEISOB 

Boab 

3.S0E-04 

3.0 

HE2S00 

4.2-in  Mortar 

O.OOE+00 

HE250C 

105-11  Cartridge 

O.OOE+00 

HE2S0K 

Ton  Container 

2.80E-03 

3.0 

HE250n 

Mine  (in  druas) 

8.82E-05 

3.0 

HE2S0P 

15S-M  Projectile 

0.00E*’00 

HE2S00 

8-in  Projectile 

0.0OE»0O 

HE2S0R 

Rocket 

5.93E-04 

3.0 

HE230S0  Spray  Tank  (no  overpack) 

1.31E-02 

3.0 

HE230S'«I  Spray  Tank  (with  overpack) 

7.87E-03 

3.0 

HOS,  HF3 


H07,HF3,HF7,HF10 
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HE4i}0  Itunition  punctured  by 
forklift  tines 


HE400B 

HE400D 

HE400C 

HE400X 

NEfOOH 

HE400P 

HE400Q 

HE400R 


Bo«b 

4.2-in  Hortar 
lOS-M  Cartridge 
Ton  Container 
Dine  (in  druas) 
ISj-m  Projectile 
8-in  Projectile 
Rocket 


HE400Sit  Spray  Tank  (uith  overpack) 


HEjSu  Fire  results  fro*  vehicle 
collision 


HEjSj  Collision  does  not  cause 
fire 


HESbO  Fire  contained  uithin 


HESiOR  4  tin  -  Burstered  aunitions 
HEj&OB  30  ain  -  Non  burstered  aunitions 
HEjoOC  >IS  ain  -  Onsite  Container 


HE570  Fire  not  contained  within 


HE570R 


ntj/Ud 

HES70C 


4  ain  -  Burstered  aunitions 
30  ain  -  Non  burstered  aunitions 
>15  ain  -  Onsite  Container 


HE590 


Nunition  in  container  detonates  or 
ruptures  given  prolonged  fire 
fire  OIS  am  for  onsite  container) 


HEoOO  Nunition  detonates  given  drop  (6  ft) 
or  collision  (per  aunition) 


HE600D 

HE600C 

HE600N 

HE600P 

HEeOOQ 

HE600R 


4.2-in  Hortar  .4B) 
lOS-ia  Cartridge  (24) 
Nine  (in  druas)  (36) 
ISS-aa  Projectile  (8) 
B-in  Projectile  (4) 
Racket  (IS) 
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1.29E-02 

3.4aE-02 

B.90E-03 

N/A 

7.07E-02 

5.00E-02 

5.00E-02 

2.43E-01 

1.53E-02 


7.25E-02 


9.27E-01 


5.0E-01 

l.OE+00 

l.OE+OO 


3.0E-01 

O.OE+00 

O.OE+00 


l.OOEvOO 


9.50E-09 


4.54E-07 

2.2BE-07 

3.4:E-07 

7.40E-08 

5.70E-08 

1.43E-07 


H03,HF4, 

HF9 


3.0 

3.0 

3.0 


3.0 

3.0 

3.0 

3.0 

3.0 


lO.O 


See  App  F  H02,H04, 

H024,HF3,HF5 


none 


See  App  F  K04,H07, 
HF7 


H02,H04,HF3 


none 

none 

none 


H026,HF5 


none 

none 

none 


none 


H026.HF5 


HOll 


10.0 

10.0 

10.0 

10.0 

10.0 

10.0 
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KEti20 

Single  aare  lunition  detonates 
given  4  (t  drop  (in  UPA; 

3.20E-10 

10.0 

HF12 

HE  700 

Huiition  in  container  detonates  given 
drop  (4  ft)  or  collision  (per  aunitioni 

3.2*)E-11 

H022,H024, 

HF11,HF13,HF14 

HE700D 

4.2-in  Hortar  (48) 

1.54E-09 

10.0 

HE700C 

105-ei  Cartridge  (24) 

7.4aE-lu 

10.0 

HE700M 

Nine  (in  druis)  {Zb) 

l.lSE-09 

10.0 

HE700P 

15j-iia  Projectile  (8) 

2.5AE-10 

10.0 

HE700Q 

8-in  Projectile  (A) 

1.92E-10 

10.0 

HE700ft 

Rocket  (IS) 

4.B0E-10 

10.0 

HE300 

HOB  Ventilation  Systea  Failure 

l.OOE-09 

10.0 

HF2,HfB,HF9,HF 
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Inside  a  transportation  container  detonating  when  dropped  is  judged  to 
be  lower.  Here  credit  is  taken  for  the  cushioning  effect  provided  by 
the  dunnage  and  packaging  material  Inside  the  container.  It  is  assumed 
that  this  will  essentially  reduce  the  Impact  velocity  experienced  by  the 
munition  Itself  by  30Z,  thus  reducing  the  impact  velocity  to  9.5  mph. 
Using  the  approach  outlined  in  Appendix  C  of  Ref.  6-4,  this  results  in  a 
probability  of  3.2  x  10~^^/munition  for  the  onsite  container  and  3.2  x 
10“^2  for  the  offsite  container. 

Collision  Leads  to  Fire.  The  probability  value  of  0.0725  was 
derived  from  Ref.  6-4,  which  presents  data  Indicating  that  25%  of  col¬ 
lision  accidents  lead  to  fire  and  29%  of  collision  accidents  occur  at 
20  mph  or  less.  This  is  the  assumed  maximum  speed  of  the  forklift 
during  a  collision. 

Fire  Contained.  The  amount  of  available  fuel  in  any  transportation 
vehicle  will  be  limited  such  that  it  cannot  sustain  a  prolonged  fire 
(greater  than  a  few  minutes).  For  nonburstered  munitions  that  are  not 
in  transportation  containers,  it  takes  30  min  (36  min  for  ton  contain¬ 
ers)  of  direct  heating  before  hydraulic  rupture  occurs.  Since  the 
available  fuel  will  be  insufficient  to  support  this  fire  duration,  the 
probability  of  fire  containment  is  1.0.  When  munitions  are  in  transpor¬ 
tation  containers,  it  takes  at  least  15  rain  of  direct  heating  of  an 
Intact  container  to  cause  a  thermal  explosion.  Again  the  available  fuel 
will  not  be  sufficient  to  support  this  fire.  Hence,  the  probability  of 
fire  containment  is  also  1.0. 

,  The  results  of  the  handling  analysis  are  presented  in  Section  11 
of  this  report.  Table  6-4  summarizes  the  results  of  the  frequency  and 
uncertainty  calculations  for  onsite  and  facility  handling.  Frequency 
results  are  median  values. 
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6.4.  UNCERTAINTY  ANALYSIS 


The  values  shovm  in  the  range  factor  column  represent  the  ratios  of 
the  95th  percentile  values  to  the  median  values.  The  range  factors  vary 
from  13  to  31.  The  accident  sequence  frequencies  with  the  largest 
uncertainty  Involve;  (1)  forklift  collision  accidents  with  fire  (H06, 
HF3)  and  (2)  munition  drop  accidents  inside  the  MDB.  For  the  latter, 
the  additional  failure  of  the  ventilation  system  for  an  agent-release  to 
the  atmosphere  to  occur  is  a  contributor  to  the  overall  uncertainty  in 
the  results. 

The  assignment  of  error  factors  to  the  accident  frequency  or  event 
probability  data  was  based  entirely  on  engineering  judgment.  For  the 
handling  accidents,  the  initiating  event  itself  (drop,  collision,  fork¬ 
lift  time  puncture)  is  assigned  an  error  factor  of  10.  The  puncture 
probability  given  a  drop  or  collision  is  assigned  an  error  factor  of  3. 
An  error  factor  of  10  is  assigned  to  the  following  events;  (1)  proba¬ 
bility  of  fire  given  a  collision;  (2)  ventilation  system  failure;  and 
(3)  low-impact  detonation  of  burstered  munitions.  The  error  factors 
for  specific  events  identified  in  the  accident  analysis  are  shown  in 
Tables  6-2  and  6-3. 
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7.  SCENARIO  LOGIC  MODELS  FOR  PLANT  OPERATIONS 

7.1.  INTERNAL  EVENTS 

The  discussion  presented  in  the  following  paragraphs  and  the 
discussion  and  figures  presented  in  Sections  7.1.1  through  7.1. A  have 
been  taken  from  documentation  provided  by  JBF  Associates,  Inc.  with 
only  minor  editing.  The  material  presented  in  Section  7.1.5  is  based 
on  material  supplied  by  JBF  Associates,  Inc.  but  has  been  augmented  by 
GA  to  address  explosions  occurring  in  the  incineration  systems. 
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The  development  of  plant  operations  accident  scenarios  involved 
systematically  evaluating  each  functional  area  of  the  plant  to  identify 
initiating  events  which,  if  unchecked,  could  lead  to  agent  releases 
above  the  screening  thresholds  set  by  MITRE.  Then,  for  each  initiating 
event,  possible  successes  and  failures  of  the  plant  systems  that  have 
the  potential  to  check  the  release  of  agent  were  considered.  Event 
trees  were  used  to  identify  the  possible  modes  of  accident  progression. 

All  of  the  initiating  events  considered  for  the  analysis  of 
internal  events  are  in  the  following  categories: 


\ 


1.  Agent  spills. 

2.  Detonations. 

3.  Fires. 

A.  Process  upsets. 

Accidents  initiated  by  external  events  are  discussed  in  Section  7.2. 
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Event  trees  show  the  possible  modes  of  accident  progression.  The 
events  included  in  the  event  trees  are  successes  and  failures  of  func¬ 
tions  (plant  systems  and/or  operator  actions)  designed  to  prevent  agent 
releases.  The  plant  systems  considered  include  the  ventilation/ 
filtration  systems,  the  fire  suppression  systems,  the  explosion 
containment  system,  and  the  process  control  systems. 


Each  event  tree  contains  a  statement  of  the  initiating  event  at  the 
top,  on  the  left-hand  side.  The  functions  that  can  limit  agent  releases 
are  listed  across  the  top  of  the  event  tree.  The  event  tree  branches  at 
each  function.  The  upward  path  at  each  branch  is  success  (yes,  the 
stated  function  worked)  and  the  downward  path  is  failure  (no,  the 
stated  function  did  not  work) . 

The  order  in  which  the  functions  are  considered  is  specified  by  the 
analyst  according  to  the  order  in  which  functions  are  challenged  unless 
logical  considerations  of  the  analysis  dictate  otherwise.  An  example  of 
a  case  where  logical  considerations  dictate  the  listed  order  of  a 
function  involves  the  ventilation  system.  The  ventilation  system  is 
challenged  immediately  whenever  agent  is  released  within  the  plant. 
However,  the  ventilation  system  is  considered  last  on  most  of  the  event 
trees  because  (1)  its  function  may  be  irrelevant  (e.g.,  if  the  building 
Integrity  is  lost  because  of  a  fire  or  explosion,  agent  will  be  released 
regardless  of  whether  the  ventilation  system  works)  and  (2)  its  failure 
probability  is  a  function  of  other  conditions  that  may  develop  (e.g.,  a 
large  fire  may  saturate  the  ventilation  system’s  filters,  thus 
increasing  the  probability  the  ventilation  system  fails  to  present  an 
agent  release). 

The  last  consideration  stated  above  applies  generally  to  each 
branch  in  the  event  tree;  the  failure  probability  of  each  function 
depends  on  the  specific  conditions  implied  by  the  path  that  leads  to  a 
challenge  of  the  function.  In  other  words,  the  probabilities  of  success 
and  failure  at  each  branch  point  in  the  event  tree  are  conditioned  on 
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the  occurrence  of  the  Initiating  event  and  the  successes  or  failures  of 
the  preceding  functions  along  the  path  that  leads  to  the  challenge  of 
the  function  being  considered.  That  Is  why  some  of  the  event  tree  func¬ 
tions  are  assigned  different  failure  probabilities  within  the  same  tree; 
they  are  challenged  on  different  paths  of  the  tree. 

Some  scenarios  were  screened  from  the  analysis  based  on  frequency 
considerations.  If  the  product  of  the  Initiating  event  frequency  and 
conservative  estimates  of  the  failure  probabilities  of  plant  safety  sys¬ 
tems  for  a  scenario  Is  less  than  10~^^/year,  that  scenario  was  screened 
from  further  consideration  (Ref.  7-1).  (The  initiating  event  frequen¬ 
cies  and  system  failure  probabilities  used  for  screening  are  shown  on 
the  event  trees.)  Other  scenarios  were  screened  based  on  successful 
operation  of  plant  safety  systems  preventing  significant  agent  releases. 

Each  accident  scenario  on  each  event  tree  Is  labeled  with  a  "C" 

If  It  has  been  screened  based  on  low  consequence,  an  "F”  If  it  has  been 
screened  based  on  low  frequency,  or  a  scenario  Identified  if  It  Is  being 
analyzed. 

A  discussion  of  the  data,  and  Its  basis,  used  In  quantifying  the 
fault  trees  and  event  trees  Is  provided  In  Section  9.1. 

7.1.1.  Explosive  Containment  Room  Vestibule  and  Munitions  Corridor 


The  analysis  reported  in  this  section  examined  potential  release 
scenarios  that  could  occur  in  the  Explosive  Containment  Room  Vestibule 
(ECV)  or  Munitions  Corridor.  These  scenarios  all  involve  damage  to  one 
or  more  munitions  or  containers  of  agent  with  subsequent  catastrophic 


failure  of  the  building  structure  or  ventilation  system.  This  analysis 
considered  the  following  types  of  Initiating  events: 

1.  Simple  spills  of  munitions  that  would  create  an  evaporative 
source  of  agent  greater  than  the  screening  thresholds  dis¬ 
cussed  earlier. 

2.  Detonations  of  munitions  that  would  result  In  a  source  of 
agent  vapor  greater  than  the  screening  thresholds. 

3.  Fires  that  cause  rupture  or  damage  of  munitions,  thereby 
creating  a  source  of  agent  greater  than  the  screening 
thresholds. 

For  Type  1  Initiators,  spills  of  one  or  two  of  each  munition  or 
container  type  were  analyzed.  For  all  munitions.  It  was  assumed  that 
spills  of  more  than  two  at  a  time  will  not  occur.  It  was  also  assumed 
that  all  processing  operations  will  make  use  of  two  identical  conveyor 
lines.  Upsets  that  cause  munition  damage  In  both  lines  will  most  likely 
be  detected  Immediately  by  some  of  the  many  sensors  that  monitor  the 
system  status  on  a  continuous  basis.  Early  detection  should  result  In 
shutdown  of  the  conveyor  lines  before  additional  munitions  are  damaged. 

The  principal  mechanisms  considered  for  munition  spills  In  the  ECV/ 
Munitions  Corridor  Include  falls  of  munitions  from  the  conveyors, 
resulting  In  puncture  damage  to  the  casings,  and  equipment  failures 
(e.g.,  failures  of  conveyor  stops  or  control  system  logic)  that  cause 
the  munitions  to  fall  from  the  conveyors. 

For  Type  2  Initiators,  detonations  of  one  of  each  munition  type 
that  contains  explosive  components  were  analyzed.  The  principal 
mechanism  considered  for  detonations  In  the  ECV/Munltlons  Corridor 
Includes  falls  of  munitions  from  the  conveyor  with  detonation  on  Impact. 


A  detonation  of  an  8-ln.  projectile  In  the  ECV  will  cause  failure  of  the 
building  and  direct  release  of  agent  vapors  to  the  environment. 


Type  3  Initiators  were  not  analyzed.  A  fire  of  sufficient  Inten¬ 
sity  and  duration  to  rupture  or  detonate  a  munition  or  agent  container 
Is  not  credible  for  the  ECV/Munltlons  Corridor  due  to  the  low  Inventory 
of  combustibles  In  these  areas.  However,  there  are  Ignition  sources  In 
these  areas  (e.g.,  motors  and  cables).  Therefore,  scenarios  Involving 
fire  subsequent  to  an  agent  spill  or  munition  detonation  were  con¬ 
sidered. 

The  event  trees  developed  for  Initiating  events  In  the  ECV  with 
estimated  frequencies  above  the  screening  threshold  are  shown  In 
Figs.  7-1  through  7-4.  The  ventilation  system  event  was  quantified 
using  the  fault  tree  presented  In  Fig.  7-5.  Table  7-1  defines  the  event 
tree  functions. 

The  following  Is  a  summary  of  the  assumptions  used  in  developing 
these  event  trees: 

1.  All  processing  operations  will  use  two  Identical  conveyor 
lines. 

2.  Upsets  that  cause  munition  damage  In  two  conveyor  lines  at 
once  will  be  detected  Immediately. 

3.  Detonations  of  8-ln.  projectiles  In  the  ECV  will  cause 
structural  failure  of  the  MDB,  resulting  In  direct  agent 
release  to  the  environment,  based  on  performed  analysis. 

4.  A  fire  (as  an  Initiating  event)  of  sufficient  Intensity  and 
duration  to  rupture  or  detonate  a  munition  or  agent  container 
Is  not  credible  for  the  ECV/Munltlons  Corridor  due  to  the  low 
combustible  Inventory  In  these  areas. 
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FIRE 

AVOIDED 


PROPAGATION 

AVOIDED 


SEQUENCE 

ID 


DETONATION  OF 
ONE  BURSTEREO 
MUNITION 
INECV 


ECV-D81 


FREQUENCY.  YR"^ 


R;3x10“^ 
M:4xl0“^ 
Q: 3  X 10“^ 
P:  6  X  10“^ 
C:1x10"® 


ECV-AIB 


0.5  ROCKETS 
0.99  OTHERS 


SUCCESS 

FAILURE 


0.5  ROCKETS 

10-2  others 


ECV-PR 


0.99  ROCKETS 
0.9  OTHERS 


P046 


P047 


10“2  ROCKETS 
10"^  OTHERS 


P048 


TABLE  7-1 

EVENTS  CONSIDERED  FOR  THE  ECV/MUNITIONS  CORRIDOR 


Event 


Description 


Spill  of  one  rocket  in  ECV 
(ECV-SRl) 


Spill  of  one  mine  in  ECV 
(ECV-SMl) 


Spill  of  two  bombs  in  ECV 
(ECV-SB2) 


Spill  of  one  ton  container 
in  ECV  (ECV-STl) 


Spill  of  two  ton  containers 
in  the  ECV/COR  (ECV-ST2) 


Detonation  of  one  rocket  in 
ECV  (ECV-DRl) 

Detonation  of  one  mine  in 
ECV  (ECV-DMl) 


Detonation  of 
projectile  in 

Detonation  of 
projectile  in 
(ECV-D1051) 


one  8-in. 

ECV  (ECV-D81) 

one  105-rnm 
ECV/COR 


One  rocket  falls  off  the  conveyor  due  to  a 
process  upset  or  improper  loading  and  is 
punctured.  The  spill  is  not  cleaned  up  in 
1  h. 

One  mine  falls  off  the  input  conveyor  due 
to  a  process  upset  or  improper  loading  and 
is  punctured.  The  spill  is  not  cleaned  up 
in  1  h. 

One  tray  of  bombs  falls  off  a  bypass  con¬ 
veyor  due  to  improper  loading  or  switch 
failures  that  prevent  the  conveyor  stop 
from  being  raised  until  the  charge  can 
arrives.  The  bombs  are  punctured,  and 
the  spill  is  not  cleaned  up  in  1  h. 

One  ton  container  falls  off  a  bypass  con¬ 
veyor  due  to  improper  loading  or  switch 
failures  that  prevent  the  conveyor  stop 
from  being  raised  until  the  charge  car 
arrives.  The  container  is  punctured, 
and  the  spill  is  not  cleaned  up  in  1  h. 

One  ton  container  on  each  line  is  damaged 
when  a  control  system  failure  prevents  the 
stops  at  the  ends  of  the  bypass  conveyors 
from  being  raised  when  the  charge  car  is 
unavailable.  The  containers  are  punctures, 
and  the  spill  is  not  cleaned  up  in  1  h. 

A  rocket  falls  off  the  input  conveyor  and 
detonates . 

A  mine  falls  off  the  input  conveyor  and 
detonates . 

A  projectile  falls  off  a  conveyor  and 
detonates . 

A  projectile  falls  off  a  conveyor  and 
detonates . 
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TABLE  7-1  (Continued) 


Event 

Description 

Detonation  of  one  155 -mm 
projectile  in  ECV/COR 
(ECV-D1551) 

A  projectile  falls  off  a  conveyor  and 
detonates. 

Avoid  ignition  (ECV-AI) 

Failure  on  this  event  tree  branch  implies 
ignition  of  an  agent  spill.  Motors  and 
cables  are  potential  ignition  sources  in 
the  ECV. 

Avoid  ignition  (ECV-AIB) 

Failure  on  this  event  tree  branch  implies 
ignition  of  agent  vapors  and/or  liquid 
agent  spills  following  a  munition  detona¬ 
tion.  Motors  and  cables  are  potential 
Ignition  sources  in  the  ECV. 

Ventilation  system  (VENT) 

Failure  on  this  event  tree  branch  implies 
a  release  of  agent  through  the  ventilation 
system  due  to  (1)  duct  failure  or  (2)  fil¬ 
ter  failures.  (See  fault  tree  In 

Fig.  7-5.) 

Propagation  Avoided 
(ECV-PROP) 

Failure  on  this  event  tree  branch  implies 
that  fragments  from  a  detonated  munition 
hit  other  munitions  in  the  ECV  or  the 
unpack  area  causing  additional  agent 
spillage. 

’j  vf.' vjyj  tfv  wj  f';rjn’TV->'^’r^y^ 


5.  Fires  In  the  ECV/Munitions  Corridor  will  not  be  suppressed 

since  there  are  no  fire  suppression  systems  and  personnel  will 
not  be  sent  In  to  fight  a  fire. 

7.1.2.  Munition  Processing  Systems 


The  analysis  reported  In  this  section  examined  potential  failures 
Involving  all  seven  of  the  munitions  processing  systems.  They  Include: 

*  Mine  machine  (MIN) . 

*  Rocket  shear  machine  (RSM). 

*  Rocket  punch  and  drain  station  (RDS). 

*  Projectile/mortar  disassembly  machine  (PMD). 

*  Burster  size  reduction  (BSR)  machine. 

*  Bulk  drain  station  (BDS). 

*  Multipurpose  demilitarization  machine  (MDM) . 

This  evaluation  assumed  that  the  machines  are  capable  of  processing 
munitions  at  designed  rates  by  completely  draining  agent  and  disassem¬ 
bling  munitions.  Also,  any  situation  that  prevents  the  machines  from 
attaining  those  design  parameters  requires  that  the  machine  be  shut 
down. 


Based  on  these  assumptions  the  following  types  of  events  were 
evaluated  for  each  machine: 

1.  Simple  spills  of  munitions  that  would  create  an  evaporative 
source  of  agent  greater  than  the  screening  thresholds  dis¬ 
cussed  earlier. 


Detonations  of  munitions  that  would  result  In  a  source  of 
agent  vapor  greater  than  the  screening  thresholds. 
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3. 


Fires  that  cause  rupture  or  damage  of  munitions,  thereby 
creating  a  source  of  agent  greater  than  the  screening 
thresholds . 


For  Type  1  initiators,  spills  of  one  or  more  of  each  munition  or 
container  type  were  analyzed.  The  mechanisms  considered  for  munition 
spills  in  the  ECR  or  MFB  include  (1)  random  falls  of  munitions  from  the 
conveyors,  resulting  in  puncture  damage  to  the  casings,  (2)  equipment 
failures  (e.g.,  failures  of  conveyor  stops  or  control  system  logic)  that 
cause  the  munitions  to  fall  from  the  conveyors,  and  (3)  equipment  fail¬ 
ures  (e.g.,  shearing  of  a  partially  drained  rocket)  that  cause  munitions 
to  be  processed  improperly. 

For  Type  2  initiators,  detonations  of  one  of  each  munition  type 
that  contains  explosive  components  were  analyzed.  The  mechanisms  con¬ 
sidered  for  detonations  in  the  ECR  or  MPB  include  (1)  falls  of  munitions 
from  the  conveyor  with  detonation  on  impact  and  (2)  process  upsets  or 
equipment  failures  (e.g.,  loss  of  water  spray  during  rocket  shearing) 
that  cause  munitions  to  be  processed  improperly. 

It  was  assumed  that  the  ECR  is  likely  to  contain  a  blast  within  its 
confines  since  it  is  designed  and  constructed  to  do  so. 

Type  3  initiators  were  not  analyzed.  A  fire  of  sufficient  inten¬ 
sity  and  duration  to  rupture  or  detonate  a  munition  or  agent  container 
is  not  credible  for  the  ECR  or  MPB  due  to  the  low  inventory  of  combus¬ 
tibles  in  these  areas.  However,  there  are  ignition  sources  in  these 
areas  (e.g.,  motors  and  cables).  Therefore,  scenarios  involving  fire 
subsequent  to  an  agent  spill  or  munition  detonation  were  considered. 

Figures  7-6  through  7-8  show  the  event  trees  for  the  munitions 
processing  systems.  The  ventilation  system  event  was  quantified  using 
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the  fault  tree  presented  in  Fig.  7-5.  Table  7-2  defines  the  event  tree 
functions . 


The  following  is  a  sunnnary  of  the  assumptions  we  made  in  developing 
these  event  trees: 

1.  All  processing  operations  will  use  two  identical  conveyor 
lines . 

2.  Upsets  that  cause  munition  damage  in  two  conveyor  lines  at 
once  will  be  detected  immediately. 

3.  Agent  reservoirs  within  munitions  are  at  or  near  atmospheric 
pressure. 

7.1.3.  Buffer  Storage  Area 

The  analysis  reported  in  this  section  examined  potential  release 
scenarios  that  could  occur  in  the  Buffer  Storage  Area  (BSA)  on  the  first 
floor  of  the  MDB.  The  BSA  contains  only  conveyors  that  hold  drained 
munitions  and  containers  (projectiles,  cartridges,  bombs,  and  ton 
containers)  awaiting  decontamination  in  the  Metal  Parts  Furnace.  The 
only  items  that  will  contain  a  significant  amount  of  residual  agent 
after  being  drained  are  ton  containers.  These  containers  could  contain 
75  to  85  lb  of  residual  agent.  Therefore,  t,he  spill  of  one  drained  ton 
container  in  the  BSA  was  analyzed.  To  account  for  the  chance  that  an 
undrained  munition  or  container  could  be  in  the  BSA  (due  to  failures  in 
the  Bulk  Drain  Station  or  the  Multipurpose  Demilitarization  Machine), 
the  spill  of  one  full  ton  container  was  also  analyzed.  Other  undrained 
munitions  could  also  spill  their  contents  in  the  BSA;  the  full  ton 
container  was  selected  as  a  representative  worst-case  spill  for  this 
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TABLE  7-2 

EVENTS  CONSIDERED  FOR  THE  MUNITION  PROCESSING  SYSTEMS 


Spill  of  mine  In  ECR 
(ECR-MIN) 


Avoid  Ignition  (ECR-AI) 


Suppression  (ECR-SUPP) 


Description 


Any  process  upset  resulting  In  the  release 
of  the  agent  Inventory  of  a  mine  In  the 
ECR. 

Failure  on  this  event  tree  branch  Implies 
Ignition  of  an  agent  spill.  Motors  and 
cables  are  potential  Ignition  sources  In 
the  ECR. 

Failure  on  this  event  tree  branch  Implies 
that  the  dampers  for  Inlet  ventilation  to 
the  ECR  do  not  close. 


Ventilation  system  (ECR-VS)  Failure  on  this  event  tree  branch  Implies 

a  release  of  agent  through  the  ventilation 
system. 


Spill  of  two  mines  In  ECR 
(ECR-MINES) 


Spill  of  8-ln.  projectile 
In  ECR  (ECR-PROJ) 


Any  process  upset  resulting  In  the  release 
of  the  agent  Inventory  of  two  or  more  mines 
In  the  ECR. 

Any  process  upset  resulting  In  the  release 
of  the  agent  Inventory  of  8-ln.  projectiles 
In  the  ECR. 


Spill  of  projectiles  In  ECR  Any  process  upset  resulting  In  the  release 
(ECR-PROJS)  of  the  agent  Inventory  of  8-ln.  projectile 

In  the  ECR. 


Spill  of  rocket  In  ECR 
(ECR-ROC) 


Any  process  upset  resulting  In  the  release 
of  the  agent  Inventory  of  a  rocket  In  the 
ECR. 


Spill  of  rockets  In  ECR 
(ECR-ROCS) 


Any  process  upset  resulting  In  the  release 
of  the  agent  Inventory  of  two  or  more 
rockets  In  the  ECR. 


Detonation  of  mlne(s)  In 
ECR  (ECR-DMl) 


Any  process  upset  resulting  In  the  detona¬ 
tion  of  one  or  more  mines  In  the  ECR. 


Failure  on  this  branching  operator  implies 
that  the  walls,  ceilings,  blast  dampers,  or 
blast  gates  of  the  ECR  are  breached  by  the 
blast. 


Structure  contains  blast 
(ECR-BLAST) 
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TABLE  7-2  (Continued) 


Avoid  ignition  (ECR-AIB) 


Description 


Failure  on  this  event  tree  branch  implies 
Ignition  of  agent  vapors  and/or  liquid 
agent  spills  following  a  munition  detona¬ 
tion. 


Detonation  of  projectile (s)  Any  process  upset  resulting  in  the  detona- 

In  ECR  (ECR-DPl)  tion  of  one  or  more  projectiles  in  the  ECR. 

Detonation  of  rocket (s)  in  Any  process  upset  resulting  in  the  detona- 

ECR  (ECR-DRl)  tion  of  one  or  more  rockets  in  the  ECR. 


Spill  of  bulk  item  in  MFB 
(MPB-BULK) 


Any  process  upset  resulting  in  the  release 
of  the  agent  inventory  of  a  bulk  item  in 
the  MPB. 


Avoid  ignition  (MPB-AI) 


Failure  on  this  event  tree  branch  implies 
ignition  of  an  agent  spill.  Motors  and 
cables  are  potential  Ignition  sources  in 
the  MPB. 


Suppression  (MPB-SUPP) 


Failure  on  this  event  tree  branch  implies 
that  the  fire  brigade  does  not  successfully 
extinguish  a  fire  in  the  MPB  by  spraying  it 
with  either  decon  solution  or  CO2. 


Ventilation  system  (MPB-VS)  Failure  on  this  event  tree  branch  implies 

a  release  of  agent  through  the  ventilation 
system. 


Spill  of  bulk  items  in  MPB 
(MPB-BULKS) 


Spill  of  8-in.  projectile 
in  MPB  (MPB-PROJ) 


Any  process  upset  resulting  in  the  release 
of  the  agent  Inventory  of  two  or  more  bulk 
items  in  the  MPB. 

Any  process  upset  resulting  in  the  release 
of  the  agent  inventory  of  an  8-ln.  projec¬ 
tile  in  the  MFB. 


Spill  of  projectiles  in  MPB  Any  process  upset  resulting  in  the  release 
(MPB-PROJS)  of  the  agent  inventory  of  two  or  more  pro¬ 

jectiles  in  the  MPB. 
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TABLE  7-2  (Continued) 


Event 


Description 


Avoid  Ignition  (MPB-AIB)  Failure  on  this  event  tree  branch  Implies 

Ignition  of  agent  vapors  and/or  liquid 
agent  spills  following  a  munition  detona- 


Spills  In  the  BSA  can  result  from  a  ton  container  falling  off  the 
conveyor.  For  this  analysis.  It  was  assumed  that  the  full  container  Is 
punched  at  the  Bulk  Drain  Station  but  not  drained.  Therefore,  no  punc¬ 
ture  Is  required  to  release  Its  contents. 

Scenarios  In  which  fires  cause  a  release  from  the  BSA  were  not 
analyzed  since  there  are  no  combustibles  In  this  area  for  sustaining  a 
fire.  However,  there  are  Ignition  sources  (motors  and  cables),  so  the 
possibility  of  an  agent  spill  Igniting  was  considered. 

The  event  tree  developed  for  the  BSA  is  shown  In  Fig.  7-9. 
Descriptions  of  the  events  Included  In  this  tree  are  In  Table  7-3. 

The  ventilation  event  tree  branch  was  quantified  using  the  fault  tree 
presented  In  Fig.  7-5. 

The  following  Is  a  summary  of  the  assumptions  used  in  developing 
the  event  tree  shown  in  Fig.  7-9. 

1.  The  Bulk  Drain  Station  removes  95%  of  the  agent  in  a  munition 
or  container  under  normal  conditions. 

2.  All  ton  containers  that  reach  the  BSA  have  been  punched  at  the 
Bulk  Drain  Station. 

7.1.4.  Toxic  Cubicle 

The  analysis  presented  In  this  section  examined  potential  release 
scenarios  that  could  occur  in  the  toxic  cubicle  (TOX) .  The  only  sources 
of  agent  in  this  area  are  the  agent  collection  tanks  and  the  agent  col¬ 
lection  and  transfer  lines.  The  scenarios  which  were  analyzed  involve 
spills  of  agent  from  these  sources  with  subsequent  failure  of  either  the 
building  structure  or  the  ventilation  system,  resulting  in  a  release  of 
agent  to  the  environment. 
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TABLE  7-3 

EVENTS  CONSIDERED  FOR  THE  BSA 

Spill  of  one  ton  container  A  punched  ton  container  falls  off  the 

In  BSA  buffer  storage  conveyor  In  the  BSA. 

Container  drained  at  BDS  Failure  on  this  event  tree  branch  Implies 

(BDS-FDT)  that  the  Bulk  Drain  Station  (BDS)  did  not 

drain  a  ton  container  before  sending  it  on 
to  the  BSA. 

Orientation  precludes  spill  Failure  on  this  event  tree  branch  Implies 

(DTCl-ORI)  that  a  drained  ton  container  that  Is 

dropped  lands  In  the  proper  orientation  for 
drainage  of  Its  residual  agent  contents. 

Avoid  Ignition  (BSA-AI)  Failure  on  this  event  tree  branch  Implies 

Ignition  of  the  agent  spill.  Motors  and 
cables  are  potential  ignition  sources  in 
the  BSA. 

Suppression  (BSA-SUPP)  Failure  on  this  event  tree  branch  Implies 

that  the  dampers  do  not  successfully 
extinguish  a  fire. 

Failure  on  this  event  tree  branch  implies 
a  release  of  agent  through  the  ventilation 
system  due  to  (1)  duct  failure  or  (2)  fil¬ 
ter  failures.  (See  fault  tree  shown  In 
Fig.  7-12.) 


Ventilation  system  (VENT) 


Spills  in  the  TOX  can  result  from  equipment  ruptures  (tanks,  pip¬ 
ing,  or  valves)  or  from  overfilling  of  an  agent  collection  tank.  Rup¬ 
ture  of  a  tank  or  of  the  tank  outlet  valves  or  piping  would  result  in 
the  spill  of  the  entire  contents  of  one  agent  collection  tanks.  (A 
500-gal  spill  was  assumed  for  this  case.)  On  the  other  hand,  rupture  of 
the  tank  inlet  valves  or  piping  or  overfilling  a  tank  would  result  in  a 
substantially  smaller  spill.  Therefore,  these  two  classes  of  spills 
were  analyzed  separately. 

Scenarios  in  which  a  fire  in  the  TOX  causes  a  release  were  not  ana¬ 
lyzed  since  there  are  no  combustibles  in  the  TOX  for  sustaining  a  fire. 
However,  there  are  ignition  sources  (motors  and  cables),  so  scenarios  in 
which  agent  spills  are  ignited  were  analyzed. 


The  accident  event  trees  developed  for  the  TOX  are  shown  in 
Figs.  7-10  and  7-11.  Table  7-4  provides  descriptions  of  the  events  used 
to  construct  these  event  trees,  and  Fig.  7-12  shows  the  fault  tree  which 
was  constructed  to  quantify  the  fire  suppression  event.  The  ventilation 
system  event  was  quantified  using  the  fault  tree  presented  in  Fig.  7-5. 


7.1.5.  Incinerator  Systems 


7. 1.5.1.  Furnace  Explosions.  Four  furnaces  are  used  in  the  MDB: 


1. 

2. 

3. 

4. 


The  Liquid  Incinerator  (LIC). 

The  Metal  Parts  Furnace  (MPF). 

The  Deactivation  Furnace  System  (DFS) 
The  Dunnage  Incinerator  (DUN). 


Analyses  of  explosions  resulting  from  operating  these  furnaces  focused 
upon  two  generic  explosion  scenarios: 


Furnace  explosions  -  in  which  the  combustible  material  is 
initially  confined  to  the  furnace  interior. 


m 
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TABLE  7-4 

EVENTS  CONSIDERED  FOR  THE  TOX 


Event 


Description 


Large  spill  In  TOX  (TOX-SL)  The  contents  of  one  agent  collection  tank 

(500  gal)  are  spilled  onto  the  floor  of  the 
TOX  due  to  rupture  of  the  tank  Itself  or 
rupture  of  outlet  valves  or  piping.  The 
frequency  Is  dominated  by  pipe  failure  with 
a  rate  of  10~^/yr. 


Small  spill  In  TOX  (TOX-SS)  An  amount  of  agent  less  than  the  volvime  of 

one  agent  collection  tank  Is  spilled  onto 
the  floor  of  the  TOX  (typically  less  than 
50  gal)  due  to  tank  overfill  or  rupture  of 
the  tank  Inlet  piping  or  valves. 

Avoid  Ignition  (TOX-AI)  Failure  on  this  event  tree  branch  Implies 

Ignition  of  the  agent  spill.  Motors  and 
cables  are  potential  Ignition  sources  In 
the  TOX.  This  probability  was  subjectively 
estimated. 


Suppression  (TOX-SUPP)  Failure  on  this  event  tree  branch  Implies 

that  the  fire  suppression  system  does 
not  start  and  that  the  operator  falls  to 
either  (1)  close  the  room  inlet  dampers  or 
(2)  turn  on  the  dry  chemical  fire  suppres¬ 
sion  system.  (See  fault  tree  shown  In 
Fig.  7-12.) 


Ventilation  system  (VENT)  Failure  on  this  event  tree  branch  implies 

a  release  of  agent  through  the  ventila¬ 
tion  system  due  to  (1)  duct  failure  or 
(2)  filter  failures.  (See  fault  tree 
shown  In  Fig.  7-5.) 
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2.  Room  explosions  -  in  which  a  flammable  mixture  forms  outside 
of  the  furnace. 

Room  explosions  do  not  preclude  accompanying  deflagration  inside  of  the 
furnace. 

Structural  evaluations  show  that  the  LIC  can  contain  a  furnace 
explosion.  Since  there  Is  no  resultant  agent  release  to  the  environ¬ 
ment,  LIC  furnace  explosions  can  be  screened  due  to  their  low 
consequence. 


A  LIC  room  explosion  can  occur  If,  following  a  LIC  shutdown,  con¬ 
tinued  agent  or  fuel  flow  Into  the  LIC  results  In  a  flammable  mixture 
forming  In  the  LIC  room.  However,  the  LIC  room  ventilation  flow  rate 
precludes  flammable  mixture  formation,  even  If  lOOZ  agent  or  fuel  flow 
continues.  Because  of  the  high  ventilation  system  reliability,  the 
frequency  of  Independent  failures  resulting  In  an  LIC  shutdown,  con¬ 
tinued  fuel  or  agent  flow,  and  ventilation  system  failure  Is  below  the 
10-10/yr  screening  criteria. 

Loss  of  offsite  power  was  also  Investigated  as  an  LIC  room  explo¬ 
sion  Initiating  event,  because  both  LIC  shutdown  and  loss  of  ventilation 
flow  occur  without  any  electric  power.  Thus,  at  frequencies  on  the 
order  of  0.1  per  year,  a  single  Initiating  event  can  cause  an  LIC  shut¬ 
down  and  ventilation  system  failure.  However,  the  loss  of  offsite  power 
terminates  agent  flow  since,  without  the  pressure  developed  by  the  agent 
feed  pump,  the  agent  cannot  physically  flow  through  the  LIC  atomizer. 
Moreover,  the  valves  on  the  LIC  fuel  lines  are  designed  to  fail  closed 
upon  a  loss  of  power.  These  design  features,  in  conjunction  with  pro¬ 
cedures  requiring  that  the  operators  close  the  manual  fuel  block  valves, 
result  in  the  frequency  of  loss  of  offsite  power  initiated  explosions 
also  being  below  10“^®/yr. 


An  MFF  explosion  can  result  In  an  agent  release  to  the  environment 
1£  It  Involves  an  undralned  or  unpunched  bulk  Item  (l.e.,  a  ton  contain¬ 
er,  spray  tank,  or  bomb).  If  an  undralned  bulk  Item  is  inadvertently 
fed  to  the  MPF,  the  explosion  Involves  agent  deflagration.  However, 
this  type  of  explosion  can  only  occur  If  the  MPF  Is  shut  down  while  an 
undralnd  bulk  Item  Is  being  processed.  Although  MPF  shutdowns  are 
rather  common  (~7  per  year),  the  probability  of  failing  to  drain  a  bulk 
item  Is  so  low  that  the  frequency  of  an  MPF  explosion  occurring  while  an 
undralned  bulk  item  is  being  processed  is  below  10"^®/yr. 


An  MPF  explosion  will  occur  if  an  unpunched  bulk  item  is  fed  to 
the  MPF  as  a  result  of  the  bulk  item  experiencing  hydraulic  rupture. 
Hydraulic  ruptures  are  capable  of  damaging  the  MDB  and  releasing  virtu¬ 
ally  all  of  the  bulk  item  inventory  to  the  environment.  Hydraulic  rup¬ 
tures  have  frequencies  about  10“^®/yr. 


A  natural  gas  deflagration  can  also  cause  an  MPF  explosion.  Since 
the  MPF  is  subjected  to  structural  failure  during  natural  gas  deflagra¬ 
tions,  these  explosions  contribute  to  the  plant  risk.  However,  MPF  room 
explosions  are  screened  from  the  risk  assessment  because  their  frequency 
is  below  10”^0/yr.  This  is  due  to  the  high  room  ventilation  system 
reliability,  a  fall-safe  fuel  valve  design,  and  instituted  procedural 
requirements.  Both  DFS  and  DUN  room  explosions  have  frequencies  below 
IQ-lO/yr  for  the  same  reason. 


Structural  evaluation  of  DFS  furnace  explosions  conclude  that  the 
blast  is  Insufficient  to  fail  the  DFS  room  walls.  Hence,  any  agent 
present  when  the  explosion  occurs  will  remain  in  the  DFS  room,  and  there 
will  be  no  damage  to  any  munitions,  containers,  or  equipment  outside  of 


the  DFS  room. 


The  DUN  furnace  can  contain  a  natural  gas  deflagration.  Conse¬ 
quently,  no  agent  release  results  from  this  scenario.  However,  the  DUN 
furnace  cannot  survive  a  munition  detonation.  Although  the  probability 
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of  inadvertently  feeding  a  munition  to  the  DUN  is  low  (on  the  order  of 
10"^  per  munition  pallet  or  mine  drum),  the  high  munition  processing 
rates  result  in  DUN  explosion  frequencies  ranging  from  ~10“^  to  ~10~^ 
per  year,  depending  upon  the  munition  type.  If  a  munition  detonates  in 
the  DUN,  its  entire  Inventory  is  released  to  the  environment  by  the 
detonation. 

Table  7-5  describes  the  Initiating  events  for  LIC  shutdowns. 
Figures  7-13  through  7-38  present  the  corresponding  incinerator  system 
logic  models. 

7.1. 5. 2.  Dunnage  Incinerator  Accidents  Analysis 


Mines 


Inadvertently  feeding  a  mine  to  the  Dunnage  Incinerator  (DUN) 
requires  that  the  following  three  faults  occur: 

1.  The  operators  mistakenly  leave  a  mine  in  the  dunnage  box. 

2.  The  mine  counter  fails. 

3.  The  operator  responsible  for  inspecting  the  dunnage  box  prior 
to  charging  it  to  the  DUN  fails  to  detect  the  mine. 

Because  of  all  the  packing  in  the  dunnage  box,  the  ability  of  an  opera¬ 
tor  to  detect  a  mine  by  visual  inspection  is  severely  limited.  Hence, 
the  probability  that  the  operator  responsible  for  inspecting  the  dunnage 
box  fails  to  detect  the  mine  is  essentially  unity. 

The  mine  counter  has  two  failure  modes:  mechanical  and  human 
error.  The  dominant  failure  modes  involves  an  operator  failing  to 
properly  initialize  the  mine  counter  prior  to  unloading  a  drum  of 
mines.  This  human  error  is  estimated  to  have  a  0.01  probability 
(Ref.  7-2). 
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TABLE  7-5 

Lie  INITIATING  EVENT  DESCRIPTIONS 


Initiator  Description 

LIC-1  These  initiators  are  all  spurious  shutdown  signals  and 

process  upsets  which  are  not  expected  to  cause  agent 
release  if  no  action  is  taken  to  stop  the  furnace 
operations. 

These  initiators  cause  the  loss  of  CA  to  the  LIC-AB.(^) 

These  initiators  cause  the  loss  of  all  CA  to  the  LIC. 

These  initiators  cause  a  temporary  loss  of  fuel  or  CA  to 
the  LIC-AB.(c) 

These  initiators  cause  excess  feed  agent  to  the  LIC.(*^) 

LIC-2  These  initiators  cause  the  loss  of  air  flow  through  the 

LIC  PAS. 

LIC-3  These  initiators  cause  the  loss  of  natural  gas  to  all 

furnaces. 

LIC-4  These  initiators  cause  the  loss  of  fuel  to  the  IIC-AB. 
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Fig.  7-20.  Lie  room  ventilation  fault  tree 
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Fault  tree  for  fuel  flow  forming  a  flammable  mixture 
in  the  Lie  room 
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Fig.  7-30.  Fault  tree  for  draining  bulk  containers 
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Fault  tree  for  feeding  an  unpunched  container  to  the  MPF 
(sheet  1  of  4) 
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Fault  tree  for  feeding  an  unpunched  container  to  the  MPF 
(sheet  4  of  4) 


The  probability  that  the  operators  mistakenly  leave  a  mine  in  the 
dunnage  box  involves  two  operator  errors,  one  of  which  is  recoverable. 
First,  an  operator  must  inadvertently  begin  to  place  a  mine  in  the  dun¬ 
nage  box.  This  human  error  is  estimated  to  have  the  probability  of 
0.01.  However,  the  mine  weighs  23  lb,  and  is  of  a  different  shape  than 
the  drum  packing  material.  Since  the  extra  weight  and  shape  difference 
are  sensory  cues  to  alert  the  operator  of  the  initial  error,  a  0.1 
recovery  factor  (Ref.  7-3)  is  applied  to  the  initial  human  error  prob¬ 
ability.  Moreover,  the  second  operator  assisting  with  the  unloading 
operation  can  prevent  a  mine  from  being  left  in  the  dunnage  box  if  he 


sees  the  first  operator  placing  it  in  the  box,  or  if  he  sees  the  mine 
in  the  box  while  loading  it.  A  human  error  probability  of  0.01  was 
assigned  to  the  second  operator.  Therefore,  the  overall  failure  prob¬ 
ability  per  drum  was  calculated  as  follows: 

10-2  X  10-2  X  0.1  X  10-2  =  io-7/<irum 

The  frequency  of  inadvertently  feeding  a  mine  to  the  DUN  is  the  product 
of  the  failure  probability  per  drum  multiplied  by  the  number  of  mine 
drums  processed  per  year. 

Rockets,  Mortars,  and  105s 

Inadvertently  feeding  a  rocket,  mortar,  or  105  to  the  DUN  requires 
that  the  following  two  faults  occur; 

1.  The  operators  mistakenly  leave  a  munition  in  the  dunnage  box. 

2.  The  operator  responsible  for  inspecting  the  dunnage  box  prior 
to  charging  it  to  the  DUN  falls  to  detect  the  munition. 

From  the  analysis  for  the  mines,  the  probability  that  the  operators 
mistakenly  leave  a  munition  in  the  dunnage  box  is  10"^.  Since  rockets, 
mortars,  and  105s  are  sent  to  the  UFA  without  all  of  the  packing  used 
for  mines,  the  operator  responsible  for  inspecting  the  dunnage  box  has 


an  excellent  chance  of  detecting  a  munition  mistakenly  left  in  the  dun¬ 
nage  box.  Assigning  an  error  probability  of  0.01  to  this  inspection 
results  in  an  overall  failure  probability  per  pallet  of: 

10"5  X  10"^  =*  10"^/pallet 

The  frequency  of  inadvertently  feeding  a  rocket,  mortar,  or  105  to  the 
DUN  is  the  product  of  the  failure  probability  per  pallet  multiplied  by 
the  number  of  pallets  processed  per  year. 

Other  Munitions 

Mines,  mortars,  105  mm  projectiles,  and  rockets  weigh  23,  25,  32, 
and  approximately  56  lb,  respectively.  Because  of  their  weight,  these 
munitions  can  be  handled  by  a  single  operator.  All  other  munitions 
weigh  in  excess  of  100  lb,  except  155  mm  projectiles  which  have  a  95-lb 
minimum  weight.  Because  of  their  weight,  these  munitions  cannot  be 
easily  handled  by  a  single  operator.  Although  these  other  munitions 
can  be  fed  to  the  DUN,  the  likelihood  of  this  occurring  is  dominated  by 
the  probability  that  at  least  one  operator  commits  an  act  of  sabotage. 
The  probability  of  this  event  cannot  be  quoted  in  an  unclassified 
document . 

7.1.6.  Accident  Analysis  Summary  and  Results 

Table  7-6  lists  the  internally-initated  plant  accident  sequences 
which  survived  the  preliminary  screening.  A  complete  list  of  all  the 
accident  sequences  identified  is  provided  in  Appendix  A. 

Table  7-7  presents  the  accident  frequency  results  for  these 
sequences.  The  values  shown  are  median  values.  The  range  factor  column 
represents  the  rates  of  the  95th  percentile  value  to  the  median  value. 
More  details  on  the  uncertainty  analysis  are  discussed  in  Secetion  7.3. 


<•  V  V 


TABLE  7-6 

INTERNAL  EVENTS  ACCIDENT  SEQUENCES 


Scenario 

P041 

P0A2 

P043 

P044 

P0A5 

P0A6 

P0A7 

P0A8 

P0A9 

P050 

P051 


ID  Description 


Failure  to  stop  agent  feed  to  the  LIC,  overloads  the 
ventilation  system. 

MPF  explosion  due  to  failure  to  stop  fuel  flow  after  a 
shutdown. 

MPF  explosion  due  to  hydraulic  rupture  of  an  unpunched 
bulk  Item.  MPF  room  and  ventilation  Integrity  maintained. 

MPF  explosion  due  to  hydraulic  rupture  of  an  unpunched 
bulk  Item.  MPF  room  or  ventilation  Integrity  lost. 

Ton  container  Is  spilled  In  the  ECV,  MDB  structure  falls 
due  to  subsequent  agent  fire. 

Munition  detonation  in  the  ECV,  no  fire. 

Munition  detonation  In  the  ECV,  fire  results  but  does  not 
propagate. 

Munition  detonation  In  ECV,  fire  results  and  propagates. 

Munition  detonation  In  ECR  causes  structural  and 
ventilation  system  failure. 

Munition  detonation  In  ECR  causes  structural  failure,  a 
fire,  and  ventilation  failure. 

Ton  container  spile  In  the  MPB  results  In  fire  and 
structural  failure. 


P052 


A  burstered  munition  Is  fed  to  the  DUN. 


7.2.  EXTERNAL  EVENTS 


The  following  external  event  initiators  were  considered  In  the 
development  of  plant-related  accident  scenarios  which  could  lead  to  the 
release  of  a  significant  amount  of  chemical  agent: 

1.  Tornadoes  and  high  winds. 

2.  Meteorite  strikes. 

3.  Aircraft  crashes. 

4.  Earthquakes. 

5.  Lightning. 

For  this  study,  the  demil  facility  is  defined  to  include  (1)  the 
MHI  where  munitions  awaiting  demilitarization  are  temporarily  stored 
and  (2)  the  MDB  which  houses  the  systems  and  equipments  to  destroy  the 
explosives  and  agent  contained  In  the  various  munitions.  The  accident 
sequences  Identified  were  subjected  to  a  preliminary  screening  process 
by  assigning  very  conservative  failure  probability  values.  The 
screening  criteria  for  frequency  and  agent  release  are  described  In 
Section  4. 

The  Initiating  event  families  for  plan  operations  were  Identified 
in  Section  4.1.  Table  7-8  lists  the  accident  sequences  related  to  plant 
operations  initiated  by  external  events.  The  event  tree  models  are 
presented  in  Figs.  7-39  through  7-44. 

7.2.1.  Tornadoes  and  High  Winds 

The  accident  scenarios  ideitified  involve  the  breaching  of  the 
munitions  in  the  MHI  and  the  UFA  by  tornado-  or  high  wind-generated 
missiles.  This  failure  mode  was  determined  to  be  more  credible  than 
a  tornado/high  wind-induced  building  collapse  which  could  lead  to  the 
crushing  of  munitions  by  the  falling  structure.  For  UBC  designed 
structures  such  as  the  MDB,  the  wind  loads  will  fall  the  walls  of  the 
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TABLE  7-8 

MASTER  LIST  OF  EXTERNALLY-INITIATED  PLANT  ACCIDENT  SCENARIOS 


Scenario  ID  Description 

POl  Tornado-generated  missile  puncture /crush  munitions  In  the 

MHI. 

P02  Tornado-generated  missile  detonate  munitions  In  the  MHI. 

P03  Tornado-generated  missile  puncture /crush  munitions  in  the 

UPA. 

P04  Tornado-generated  missile  detonate  munitions  In  the  UPA. 

P05  Tornado-generated  missile  damages  the  agent  piping  system 

between  the  BDS  and  TOX  at  TEAD  (bulk-only  facility). 

P06  Meteorite  strikes  the  MHI. 

P07  Meteorite  strikes  the  UPA. 

P07A  Meteorite  strikes  the  TOX. 

P08  Meteorite  strikes  the  agent  piping  system  between  the  BDS 

and  TOX  at  TEAD  (bulk-only  facility). 

P09  Direct  large  aircraft  crash  onto  the  MHI;  no  fire. 

POlO  Direct  large  aircraft  crash  onto  the  MHI;  fire  not 

contained  In  0.5  h. 

poll  Direct  large  aircraft  crash  onto  the  MHI;  fire  contained 

In  0.5  h. 

P012  Direct  large  aircraft  crash  damages  the  MDB;  no  fire. 

P013  Direct  large  aircraft  crash  damages  the  MDB;  fire  not 

contained  in  0.5  h. 

P014  Direct  large  aircraft  crash  damages  the  MDB;  fire 

contained  In  0.5  h. 

P015  Indirect  large  aircraft  crash  damages  the  MHI;  no  fire. 

P016  Indirect  large  aircraft  crash  damages  the  MHI;  fire  not 

contained  In  0.5  h. 

P017  Indirect  large  aircraft  crash  damages  the  MHI;  fire 

contained  In  0.5  h. 
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Scenario  ID  Description 


P018  Indirect  large  aircraft  crash  damages  the  MDB;  no  fire. 

P019  Indirect  large  aircraft  crash  damages  the  MDB;  fire  not 

contained  in  0.5  h. 

P020  Indirect  large  aircraft  crash  damages  the  MDB;  fire 

contained  in  0.5  h. 

P021  Direct  crash  of  a  large  or  small  aircraft  damages  the 

outdoor  agent  piping  system  at  TEAD;  no  fire. 

P022  Direct  crash  of  a  large  or  small  aircraft  damages  the 

outdoor  agent  piping  system  at  TEAD;  fire  occurs  and  not 
contained. 

P023  Earthquake  causes  the  munitions  in  the  MHI  to  fall  and  be 

punctured. 

P024  Earthquake  causes  munitions  in  the  MHI  to  fall  and 

detonate. 

P025  Earthquake  damages  the  MDB  structure,  munitions  fall  and 

are  punctured;  fire  suppressed. 


P028A(b) 


Earthquake  damages  the  MDB  structure,  munitions  fall  and 
are  punctured;  earthquake  also  initiates  fire;  fire 
suppression  system  falls. 

Earthquake  damages  the  MDB  structure,  munitions  fall  and 
are  punctured;  TOX  damaged;  fire  occurs;  fire  suppressed. 


Earthquake  damages  the  MDB  structure,  munitions  fall  and 
are  punctured;  TOX  damaged;  fire  occurs;  fire  suppression 
system  fails. 

Earthquake  damages  the  MDB;  munitions  are  intact;  fire 
occurs;  fire  suppression  system  fails. 

Earthquake  damages  the  MDB;  munitions  are  intact;  TOX 
damaged;  no  fire  occurs. 


P031A 


Earthquake  damages  the  MDB;  munitions  are  intact;  TOX 
damaged;  fire  occurs;  fire  suppressed. 


Earthquake  damages  the  MDB;  munitions  are  intact;  TOX 
damaged;  fire  occurs;  fire  not  suppressed. 
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Fig.  7-39.  Tornado- induced  agent  release  scenarios 
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MHI  have  been  designed  to  resist  the  direct  effects  of  tornadoes  with 
winds  up  to  320  mph  except  for  the  possibility  of  missiles  breaching  the 
igloo  doors  (Ref.  7-4).  In  the  MDB,  only  the  UFA  has  been  determined  to 
be  vulnerable  to  tornado/high  wind-generated  missiles  that  could  result 
in  significant  agent  releases. 

An  additional  scenario  that  applies  to  the  modified  CAMDS  facility 
at  TEAD  has  been  identified.  This  involves  the  susceptibility  of  the 
outdoor  agent  piping  system  that  links  the  bulk  drain  station  and  the 
TOX  which  will  be  located  in  a  separate  building. 

The  event  tree  developed  to  define  relevant  accident  sequences 
is  shown  in  Fig.  7-39.  No  sequences  could  be  screened  out  Initially 
as  more  detailed  quantitative  analysis  is  required  to  determine  the 
necessary  wind  velocity  to  generate  missiles  which  could  penetrate  the 
munitions.  Hence,  all  the  accident  sequences  numbered  in  the  event  tree 
were  quantified.  They  are: 

POl  -  Tornado-generated  missiles  puncture/crush  the  munitions  in 
the  MHI. 

P02  -  Tornado-generated  missiles  detonate  the  burstered  munitions 
in  the  MHI. 

P03  -  Tornado-generated  missiles  breach  the  munitions  in  the  UPA. 

P04  -  Tornado-generated  missiles  detonate  the  burstered  munitions 
in  the  UPA. 

P05  -  Tornado-generated  missiles  breach  the  agent  piping  system 
between  the  BDS  and  TOX  at  TEAD  (CAMDS-modif ied  bulk  only 
facility) . 
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missile  penetration  of  the  munition  inside  the  MHI  or  UPA  occurs  if 
(1)  a  tornado  or  extremely  high  wind  occurs  with  a  velocity  sufficient 
to  generate  a  missile  that  could  penetrate  the  MHI  door  or  UPA  wall  and 
a  munition,  and  (2)  the  missile  actually  hits  the  target  munition.  The 
probability  of  a  missile  hitting  and  rupturing  a  munition  is  the  product 
of  four  variables:  (1)  the  probability  that  the  velocity  vector  of  the 
missile  is  nearly  perpendicular  to  the  target;  (2)  the  probability  that 
the  missile  is  oriented  properly  to  penetrate  the  target;  (3)  the  number 
of  missiles  per  square  foot  of  wind;  and  (4)  the  target  area.  More 
details  on  the  derivation  of  these  variables  are  provided  in  the  calcu¬ 
lation  sheets  (Ref.  7-5).  If  the  missile  hits  a  burstercd  munition,  two 
failure  modes  are  possible,  (1)  the  munition  is  opened  up  due  to  punc¬ 
ture  or  crush,  or  (2)  the  missile  impact  causes  munition  detonation  due 
to  the  application  of  a  force  greater  than  the  "undue  force." 


Scenario  POl  -  Tornado-Generated  Missile  Penetrates  Munitions  in 
the  MHI  (No  Detonations  Occur) 


The  MHI  is  assumed  to  be  an  80-ft  long  by  27-ft  wide  igloo  with  a 
concrete  door  for  all  sites.  The  munitions  are  stored  in  onsite  trans¬ 
portation  containers,  except  the  spray  tanks  and  wet  eye  bombs  which  are 
in  their  existing  overpacks  and  not  in  onsite  transportation  containers. 
There  will  be  a  maximum  of  16  containers  in  the  MHI. 


For  an  agent  release  to  occur,  the  missile  must  penetrate  the  igloo 
door,  the  onsite  container,  and  the  munition  itself.  The  required  ini¬ 
tial  velocity  (V)  to  puncture  the  munition  is  given  by: 

V  =  Vd2  +  Vc2  +  V^2  ,  •  (7.1) 


where  Vp  =  door  penetration  velocity, 

Vq  =  onsite  container  penetration  velocity, 

Vff,  =  munition  penetration  velocity  (munition  specific). 
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The  puncture  velocity  for  a  concrete  igloo  door  has  been  analyzed  previ¬ 
ously  (Ref.  7-5)  and  was  calculated  to  be  54  mph  assuming  the  missile  is 
a  utility  pole.  The  puncture  velocity  for  the  onsite  container  was  cal¬ 
culated  to  be  63  mph.  The  penetration  velocity  for  the  munition  itself 
is  munition  specific  and  is  largely  a  function  of  the  thickness  of  the 
munition.  Details  are  provided  in  the  calculation  sh-jets.  Having  cal¬ 
culated  the  required  initial  missile  velocity,  the  required  wind  veloc¬ 
ity  to  generate  the  missile  is  determined  in  Section  4.2.  The  frequency 
of  occurrence  of  a  given  wind  speed  is  determined  from  the  set  of  curves 
given  in  Section  4. 

Scenario  P02  -  Tornado-Generated  Missile  Penetrate  Munitions  in  the 

MHI;  Detonation  Results  from  Impact 

The  analysis  of  scenarios  P02  included  the  estimation  of  the  proba¬ 
bility  that  a  missile  impacting  a  munition  would  cause  it  to  detonate. 
The  data  presented  in  Ref.  7-6  indicated  that  a  projectile  with  Comp  B 
explosive  could  ignite  when  subjected  to  a  minimum  impact  velocity  of 
123  mph.  Because  the  conditions  of  the  tests  described  in  Ref.  7-6  do 
not  fully  apply  to  the  conditions  being  considered  here  (l.e.,  the  shell 
casing  provides  protection  for  the  bursters),  it  is  assumed  that  there 
is  a  50X  chance  that  a  munition  will  detonate  at  123  mph.  Furthermore, 
we  also  estimate  the  probability  of  a  detonation  resulting  from  a  drop 
of  the  munition  from  a  height  of  40  ft  to  be  10"^  (Ref.  7-9).  The  40  ft 
drop  height  corresponds  to  a  free  fall  velocity  (in  a  vacuum)  of  about 
34.6  mph.  To  determine  the  probability  of  detonating  a  munition  at  an 
impact  velocity  equivalent  to  that  of  a  missile  required  to  penetrate 
the  igloo  and  the  munition,  we  assumed  a  lognormal  distribution  and 
derived  the  necessary  parameters  (e.g.,  standard  deviation  and  standard 
normal  deviate)  from  these  two  data  points.  The  results  are  shown  in 
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DATA  BASE  FOR  TORNADO- INITIATED  EVENTS  FOR  PLANT  OPERATIONS 


4'  vai  0/  I 


l<tl  li<*  for  lornodo-Iititiitil  Emtl  Fx  flint  OixitiM< 


Cftnt 

Si  to 

Doiiitiin 

Ijpe 

Vviikle 

Due 

DMI 

VxiiOle 

Due 

NOB 

Virilbit 

Ni«« 

Open  Arei 

Error 

Factor 

1.  Frtouency  >i"d  lunicitot 

DMt 

103-10  cirtrf 

iNimic 

I.OE-OT 

MDOIC 

I.SE-00 

10 

to  feoxitr  liiiilt 

4.2-in  lortir 

ADIIHtD 

I.IE-Ot 

AHDDID 

l.3E-0i 

10 

too  coitir 

MliHlK 

1.4E-0? 

AMDDBIt 

7.3E-07 

10 

11  •< 

ADAH ID 

t.lE-Oi 

AHDDIH 

1.3E-04 

10 

133-11  proj 

MmlP 

7.4E-07 

AHDDIP 

:.3E-06 

10 

l-in  proj 

MnHlO 

7.4E-07 

AHDIlO 

I.3E-00 

10 

rocktti 

ANIWID 

1. IE-00 

AHDDID 

1.5E-0O 

ID 

tfS 

too  coitnr 

APDDIK 

4.3E-OB 

UDO 

133-11  proj 

LIIIHIP 

I.3E-00 

LIDDSP 

l.SE-00 

10 

l-in  proj 

LIDNIO 

I.3E-00 

tlDDIO 

I.SE-00 

10 

rocket 

LimiD 

I.SE-00 

IIDOIR 

l.SE-00 

10 

MAf 

ton  contir 

MDOkD 

7.3E-07 

10 

DID 

ton  coitnr 

PIAHU 

J.8E-07 

PIDOIK 

7.3E-07 

lint 

Pirn  ID 

1.3E-04 

PSDOID 

l.SE-OO 

10 

rocket 

PIDHIA 

I.3E-00 

PIDDID 

l.SE-OO 

10 

fUOD 

105-11  eirtrp 

PUDNIC 

l.oE-07 

PUDOtC 

l.OE-07 

10 

4.2-in  lortir 

PUDHIO 

I.OE-07 

PUDOID 

l.OE-07 

10 

133-11  proj 

PUDHIP 

I.OE-07 

PUDOIP 

l.OE-07 

to 

TEDD 

koiO 

TEDHIl 

3.tE-10 

TEDDSI 

B.lE-10 

to 

103-11  cirtrp 

TEDHIC 

1. IE-00 

TEHOSC 

l.BE-00 

10 

4.2-ii  lortir 

TEDHIl 

1. IE-00 

TEDOBI 

l.BE-00 

10 

ton  coitnr 

TEDHIK 

2.4E-10 

TEDOIt 

7.3E-IO 

10 

line 

TEDHID 

I.IE-00 

TEDDID 

l.BE-00 

10 

133-11  proj 

lEDHIP 

1.3E-00 

TEDOIP 

1.8E-00 

10 

l-in  proj 

TEDMIO 

1.8E-00 

TEDDEO 

1. IE-00 

10 

rocket 

TEDHID 

I.IE-OO 

TEDDID 

1.8E-00 

10 

ipriy  tink 

TEDHI5 

l.lE-00 

TEDDBS 

l.SE-OO 

10 

UHW 

koik 

UDDHII 

J.OE-10 

UDDOBB 

8.1E-10 

10 

toi  contnr 

UDDHIt 

2.4E-10 

UDDDBX 

7.3E-IO 

10 

me 

UDDHID 

1.8E-00 

UDDCBD 

I.IE-OO 

10 

133-11  pro) 

UDDHIP 

I.3E-00 

UnnOBP 

1.  IE-00 

10 

l-in  proj 

UDDHIO 

I.SE-00 

UDDDBO 

l.BE-00 

10 

rocket 

UDDHID 

1.8E-00 

UHDDBD 

1. IE-00 

10 

iprif  tink 

UDDHIS 

l.lE-00 

UDDOBS 

I.IE-OO 

10 

TEDS 

I.K.SIPIPEI 

COOPA 

l.BE-09 

10 

Drier rnte 


SEE  CALC 
SHEETS 


7-83 


s.-  v*.'! 
A 
V 

,v^4 


TABLE  7-9  (Continued) 


2.  ProtiOility  Mnition 
ptii<cr4tid 


1.  Prot.  pipt  pcDttritxl  TIM 

4.  Nunltioii  dttomkM  All 


All 

tOM 

NHlPTt 

4,:t-07 

naPTi 

2.01-00 

SO 

1«3-m  cirtrf 

miPTC 

2.4I-.>7 

mapTc 

1.31-00 

30 

4.2'in  tortv 

IM1PT9 

7.31-07 

NDBPTD 

4.41-00 

SO 

ton  contnr 

IMIPTK 

a. 21-07 

HDBPTK 

4.91-00 

so 

lint 

mtPTH 

a.oi-07 

ABBPTH 

3.11-00 

30 

133-m  proj 

miPTP 

3.81-07 

HOBPTP 

2.31-00 

so 

>-in  pro! 

miPTi 

3.8E-07 

M8PT8 

2. 31-00 

so 

rockot 

MIPTR 

7.ffi-07 

WBPTA 

4.71-00 

SO 

ipray  tank 

WIPTS 

3.41-07 

miPTS 

a. 41-00 

so 

All 

All 

leiPT 

1.21-00 

50 

TIM 

I.K.SIAIPI) 

CDPTP 

1.3E-J2 

50 

All 

All 

oimi 

1.71-01  DINDB 

7.01-02 

2 

-*4  “>  V  * 


Sequence  P03  -  Tornado-Generated  Missile  Penetrate  Munitions  in  the 


UPA 


Except  for  accounting  for  the  difference  in  the  structure  of  the 
UPA,  the  same  analytical  approach  described  in  scenario  POl  was  used. 

The  UPA  Is  located  on  the  second  floor  of  the  MDB  and  will  contain  as 
many  as  six  onsite  containers  at  any  given  time.  The  wall  of  the  MDB  Is 
constructed  of  two  layers  of  thin  steel  sheets  (thickness  Is  approxi¬ 
mately  0.0A7  In.),  separated  by  an  Insulation  material  for  a  total 
thickness  of  approximately  2  In.  Details  of  the  analysis  are  given  In 
the  calculation  sheets  (Ref.  7-5). 


Sequence  P04  -  Tornado-Generated  Missile  Penetrate  Munitions  In  the 


UPA:  Burstered  Munitions  Detonate  Upon  Impact 


The  analysis  of  sequence  POA  follows  the  same  approach  as  sequence 
P02.  The  probability  of  munition  detonation  Is  calculated  from  the  mis 
slle  Impact  velocity  upon  penetration.  Details  are  given  in  the  calcu¬ 
lation  sheets  (Ref.  7-5). 


Sequence  P05  -  Tornado-Generated  Missile  Breach  the  Outdoor  Aee 


Plplne  System  at  the  Modified  CAMDS  Bulk-Only  Facillt- 


Analysis  of  sequence  P05  also  followed  the  same  approach  described 
above  except  that  only  a  double-walled  pipe  had  to  be  breached  in  order 
to  result  In  an  agent  release. 

7.2.2.  Meteorite  Strikes 

Like  tornado-generated  missiles,  meteorites  striking  the  MHI,  MDB, 
and  the  outdoor  agent  piping  system  at  TEAD  can  lead  to  a  significant 
amount  of  agent  release.  The  consequence  of  such  an  accident  Is  more 
severe  than  that  from  a  tornado-generated  missile  because  meteorite 
strikes  generally  Involve  fires.  Hence,  If  burstered  munitions  are 


■U 
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involved,  explosive  detonations  could  occur  from  the  fire  or  from 
direct  Impact,  leading  to  Instantaneous  agent  releases. 


The  event  tree  developed  for  meteorite-initiated  accidents  is  shown 
In  Fig.  7-30.  The  sequences  could  not  be  subjected  to  any  preliminary 
screening  without  doing  a  more  detailed  analysis  of  the  what  type  (stone 
or  iron)  and  size  of  meteorite  is  capable  of  penetrating  munitions  in 
the  MHI  or  damaging  the  MDB  which  contain  not  only  Intact  munitions 
(primarily  in  the  UFA)  but  a  large  agent  holding  tank  (in  the  TOX) . 

The  accident  sequences  identified  are: 

P06  -  Meteorite  strikes  the  MHI  and  if  burstered  munitions  are 
involved,  detonations  are  assumed  to  occur. 

P07  -  Meteorite  strikes  the  UPA  and  if  burstered  munitions  are 
Involved,  detonations  are  assumed  to  occur. 

P07A  -  Meteorite  strikes  the  TOX. 

P08  -  Meteorite  strikes  the  outdoor  agent  piping  system  at  TEAD 
(CAMDS-modif led  bulk  only  facility). 

7.2.2. 1.  Meteorite  Strike  Accident  Analysis.  The  frequency  of 
meteorite  strikes  for  meteorites  weighing  1.0  lb  or  greater  is 
(6.4  X  10"^^)/ft2  (Ref.  7-7).  For  small  meteorites  (one  ton  or  less), 
stone  meteorites  are  approximately  ten  time  more  common  than  iron. 
However,  iron  meteorites  are  more  dense  and  tend  to  have  higher  impact 
velocities  and  therefore  represent  a  significant  portion  of  the  total 
meteorites  that  can  rupture  the  munitions.  The  meteorite  size  dis¬ 
tribution  data  has  been  presented  in  Section  4.2. 
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Sequence  P06  -  Meteorite  Strikes  the  MHI 


The  munitions  in  the  MHI  are  stored  in  their  onsite  transportation 
containers.  For  agent  to  be  released  given  a  meteorite  strike,  the 
meteorite  has  to  penetrate  2  ft  of  soil  and  6  in.  of  concrete  roof,  the 
onsite  container,  and  the  munition  wall.  Hence,  there  are  essentially 
four  layers  of  structural  barrier.  The  minimum  meteorite  impact 
velocity  that  would  collapse  the  6-in.  thick  concrete  roof  is  1500  fps 
for  a  stone  meteorite  and  3800  fps  for  an  iron  meteorite.  The  overall 
frequency  of  a  meteorite  capable  of  penetrating  and  rupturing  the 
munitions  in  the  MHI  is: 


Ft  =  F(fs  +  fi)  A  X  S 


(7-2) 


where  F  =  the  frequency  of  a  meteorite  weighing  one  pound  or  more 
striking  the  earth,  6.4  x  10~^^/ft^, 

fg  =  fraction  of  stone  meteorites  which  can  penetrate  the  target, 

f^  *  fraction  of  iron  meteorites  which  can  penetrate  the  target, 

A  =  target  area  (80  x  12  ft), 

S  =  spacing  factor. 


It  is  assumed  that  burstered  munitions  will  detonate  when  struck  by  a 
meteorite.  Fire  is  also  expected  to  occur.  Details  of  the  calculations 
are  given  in  Ref.  7-5. 

Sequence  P07  -  Meteorite  Strikes  the  UFA 

In  this  sequence  the  meteorite  has  to  penetrate  the  6-in.  thick 
concrete  roof  of  the  MDB,  the  onsite  container,  and  the  munition  itself. 
The  same  approach  described  in  P06  is  used  here.  Quantification  details 
are  provided  in  Ref.  7-5. 


Sequence  P07A  -  Meteorite  Strikes  the  TOX 

The  TOX  is  located  in  the  first  floor  of  the  MDB.  The  ceiling  of 
the  TOX  is  a  minimum  12-in.  thick.  This  is  the  most  likely  area 
vulnerable  to  a  meteorite  strike.  Detailed  calculations  presented  in 
Ref.  7-5  indicate  that  either  a  200-lb  stone  meteorite  or  20-lb  iron 
meteorite  can  penetrate  the  TOX  ceiling. 

7.2.3.  Aircraft  Crashes 

The  aircraft  crash-initiated  accidents  affecting  the  MHI  and  the 
MDB  are  similar  to  those  affecting  the  storage  igloos  and  warehouses. 
Both  direct  and  Indirect  (i.e.,  adjacent  to  the  building)  crashes  were 
considered.  The  aircraft  crash  may  or  not  result  in  a  fire.  Further¬ 
more,  the  ability  to  contain  the  fire  in  the  shortest  time  possible 
influences  the  severity  of  the  accident. 

The  event  trees  developed  are  shown  in  Figs.  7-41  and  7-42.  No 
preliminary  screening  could  be  performed  until  the  actual  aircraft  crash 
frequencies  at  each  site  had  been  analyzed.  However,  once  the  accident 
frequencies  were  quantified,  those  which  have  freqencies  of  10“^®/yr  or 
less  were  not  analyzed  for  the  agent  release  quantities.  The  accident 
sequences  that  have  been  defined  from  the  event  trees  are  as  follows: 

P09  -  Direct  large  aircraft  crash  onto  the  MHI;  no  fire. 

POlO  -  Direct  large  aircraft  crash  onto  the  MHI;  fire  not  contained 
in  0.5  h. 

poll  -  Direct  large  aircraft  crash  onto  the  MHI;  fire  contained  in 
0.5  h. 


mm 


m 
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P012  -  Direct  large  aircraft  crash  damages  the  MDB;  no  fire. 

P013  -  Direct  large  aircraft  crash  damages  the  MDB;  fire  not  con¬ 
tained  in  0.5  h.* 

P014  -  Direct  large  aircraft  crash  damages  the  MDB;  fire  contained 
in  0.5  h.* 

P015  -  Indirect  large  aircraft  crash  damages  the  MHI;  no  fire. 

P016  -  Indirect  large  aircraft  crash  damages  the  MHI;  fire  not 

contained  in  0.5  h. 

P017  -  Indirect  large  aircraft  crash  damages  the  MHI;  fire  con¬ 
tained  in  0.5  h. 

P018  -  Indirect  large  aircraft  crash  damages  the  MDB;  no  fire.* 

P019  -  Indirect  large  aircraft  crash  damages  the  MDB;  fire  not 

contained  in  0.5  h.* 

P020  -  Indirect  large  aircraft  crash  damages  the  MDB;  fire  con¬ 
tained  in  0.5  h.* 

P021  -  Large  and  small  aircraft  direct  crash  damages  the  outdoor 
agent  piping  system  at  TEAD;  no  fire. 

P022  -  Large  and  small  aircraft  direct  crash  damages  the  outdoor 

agent  piping  system  at  TEAD;  fire  occurs  and  not  contained. 


*Does  not  include  effects  of  crash  on  outdoor  piping  sytem  of  the 
modified  CAMDS  facility  at  TEAD,  which  is  considered  separately. 


7.2.3. 1.  Aircraft  Crash  Accident  Analysis.  In  summary,  the  following 
general  assumptions  were  made  In  deriving  the  large/small  aircraft 
accident  sequences : 

1.  For  a  large  aircraft  crash  onto  burstered  munitions.  It  Is 
assumed  that  detonations  will  occur  for  direct  hits;  only 
rockets  and  mines  detonate  from  Indirect  hits;  and.  If  a  fire 
occurs,  It  Is  uncontalned. 

2.  No  small  aircraft  crashes  were  assumed  to  be  able  to  suffi¬ 
ciently  damage  the  MHI  or  the  MOB  to  cause  agent  releases. 

3.  The  vulnerability  of  the  outdoor  agent  piping  system  at  the 
modified  CAMDS  bulk  facility  (TEAD)  was  analyzed  separately. 

Direct  Large  Aircraft  Crash  Onto  the  MHI/MDB;  No  Fire  (P09.  P012) 

Only  large  aircraft  crashes  have  been  found  to  significantly  damage 
the  MOB  or  the  MHI.  For  a  direct  aircraft  crash,  the  target  area  Is  the 
surface  area  of  the  building.  Even  If  the  crash  does  not  lead  to  a 
fire,  the  Impact  of  the  crash  Is  strong  enough  to  cause  the  detonation 
of  burstered  munitions.  The  transportation  data  presented  In  Ref.  7-8 
Indicate  that  55Z  of  all  air  crashes  do  not  Involve  fires.  Quantifica¬ 
tion  details  are  provided  In  Ref.  7-5. 

Direct  Large  Aircraft  Crash  onto  the  MHI/MDB;  Fire  Not  Contained  In 

0.5  h  (POlO,  P013) 
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theraal  failure  threshold  data  presented  In  Appendix  F,  which  Indicate 
that  direct  heating  of  ton  containers  for  36  min  leads  to  hydraulic 
rupture.  For  burstered  munitions  In  onsite  containers,  the  thermal 
failure  threshold  Is  conservatively  defined  as  15  min,  which  Is  the 
package  design  criteria  for  an  all  engulfing  fire.  Since  the  Army 
policy  Is  not  to  fight  a  fire  Involving  direct  heating  of  burstered 
munitions,  the  probability  of  the  “not  containing  the  fire  In  0.5  h" 
event  Is  essentially  unity. 

The  amount  of  agent  released  from  bulk  containers  subjected  to 
aircraft  crash  fires  depends  on  the  ability  to  contain  the  fire.  If 
fire  Is  allowed  to  progress  for  more  than  30  min,  more  containers  will 
rupture.  The  approach  for  quantifying  the  probability  of  successful 
containment  of  an  aircraft  crash  fire  has  been  discussed  In  Section  5. 


These  scenarios  essentially  apply  to  nonburstered  munitions  only. 
If  an  airplane  crashes  directly  onto  the  MHI  or  MDB  containing  non¬ 
burstered  munitions,  it  is  expected  that  every  means  available  will  be 
employed  to  terminate  the  fire  Immediately.  The  sooner  the  fire  Is 
extinguished  the  fewer  munitions  will  be  subjected  to  thermal  rupture. 
Although  the  munitions  are  stored  In  onsite  containers  they  are  only 
provided  15-mln  protection  from  an  all  engulfing  fire.  The  approach  fo 
calculating  the  probability  of  containing  the  fire  In  0.5  h  or  less  has 
been  discussed  in  POIO.  The  quantification  details  are  provided  In 
Ref.  7-5. 


Indirect  Large  Aircraft  Crash  onto  MHI/MDB;  No  Fire  (P015.  P018 


the  building  will  be  damaged  by  flying  debris  from  an  aircraft  crash  In 
the  vicinity  of  the  building,  the  following  assumptions  were  made: 

1.  The  airplane  can  skid  100  ft  and  still  damage  the  MHI. 

2.  The  airplane  can  skid  150  ft  and  still  damage  the  MDB. 

3.  lOZ  of  all  crashes  are  directed  towards  the  Igloo  door. 

4.  25Z  of  all  crashes  are  directed  towards  the  MDB  (l.e,  either 

the  TOX  or  the  UFA  may  be  hit). 

For  the  MHI,  the  total  probability  of  an  aircraft  part  damaging 
the  munition  In  containers  is  the  stun  of  the  probability  that  the  mis¬ 
sile  will  rupture  the  structure  (Including  the  munition  at  Its  line  of 
sight)  and  the  probability  that  the  door  Is  open  at  the  time  of  the 
crash  and  the  missile  enters  the  open  door  and  hits  the  munitions. 

The  probability  that  the  missile  will  rupture  the  structure  and  the 
munitions  Is  calculated  as  follows: 


Pi  -  0.10  X  Ai/ALA 


(7-3) 


where  Ai 


the  area  of  the  crash  that  could  damage  the  Igloo  door  If 
closed, 

the  target  area  for  an  indirect  large  aircraft  crash. 


The  SAl  study  (Ref.  7-4)  Indicates  that  the  Igloo  door  may  be  open  1%  of 
the  time.  Since  only  lOZ  of  all  crashes  are  directed  towards  the  door, 
the  probability  that  the  door  is  open  and  missile  hits  the  munition 
through  the  open  door  Is  0.001. 

For  the  MDB,  it  Is  assumed  that  the  either  the  TOX  or  the  UFA  may 
be  the  most  vulnerable  to  a  missile  strike.  Assuming  that  there  was  a 
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25Z  chance  of  the  airplane  crashing  towards  the  TOX  or  the  UFA,  the 
probability  of  damaging  the  TOX  or  UFA  Is: 


Ft  -  0.25  X  At/ALA  .  (7-A) 

where  At  ■  the  area  of  crash  capable  of  damaging  the  TOX  or  UFA, 

A^  •  the  target  area  for  an  Indirect  crash  of  a  large  aircraft. 

Quantification  details  are  provided  In  Ref.  7-5. 

Indirect  Large  Aircraft  Crash  Damages  the  MHI/MDB;  Fire  Not  Con¬ 
tained  In  0.5  h  (F016.  F019) 

The  same  approach  discussed  above  Is  applied  to  the  analysis  of 
these  scenarios. 

Indirect  Large  Aircraft  Crash  Damages  the  MHI/MDB;  Fire  Contained 
In  0.5  h  (?017,  P020) 

The  same  approach  discussed  above  Is  applied  to  the  accident 
frequency  analysis  of  these  scenarios.  This  scenario  applies  to  non- 
burstered  munitions  only  based  on  the  discussion  of  scenario  FOll. 

Aircraft  Direct  Crash  Damages  the  Outdoor  Agent  Flplng  System  at 
TEAD;  No  Fire  (F021.  F022) 

The  present  CAMDS  facility  at  TEAD  which  will  be  modified  to  pro¬ 
cess  bulk  Items  only  will  have  a  separate  building  housing  the  TOX  and 
the  Lie.  The  two  buildings  will  be  connected  by  a  330  ft  agent  piping 
system  to  allow  transfer  of  agent  from  the  bulk  drain  station  to  the 
TOX.  This  pipe  may  be  damaged  by  a  both  a  large  and  small  aircraft. 

The  consequence  Is  the  same  for  both  large  and  small  aircraft  crashes, 
hence  the  total  aircraft  crash  frequency  Is  the  sum  of  the  large  and 
small  aircraft  crashes. 


The  earthquake-initiated  accident  affecting  the  MHI  Is  not  a  cre¬ 
dible  event  since  the  current  plan  Is  to  store  unstacked  munitions  In 
onsite  transportation  containers  In  the  MHI.  The  Igloo  Is  known  to 
withstand  very  high  Intensity  earthquakes  and  the  only  possibility  for 
an  agent  release  Is  If  the  munitions  were  to  fall  on  a  probe  and  be 
punctured.  Since  munitions  will  be  stored  In  cylindrical  containers  and 
will  not  be  stacked,  puncture  Is  not  possible. 

Several  areas  within  the  MDB  are  sensitive  to  earthquakes  In  the 
sense  that  damage  to  any  of  these  areas  could  lead  to  a  significant 
agent  release.  The  areas  of  concern  are:  (1)  the  UFA  where  up  to  six 
onsite  containers  may  be  present;  (2)  the  toxic  cubicle  (TOX)  which 
houses  two  agent  collection  tanks,  one  of  which  may  be  completely  full 
at  the  time  of  an  earthquake;  (3)  the  ventilation  duct;  (4)  the  agent 
piping  system  from  the  bulk  drain  station  (BDS)  to  the  TOX  and  from  the 
TOX  to  the  liquid  Incinerator  (LIC);  and  (5)  the  fuel  lines  which  could 
break  and  be  Ignited  by  earthquake-initiated  electrical  sparks. 

Figures  7-43  and  7-44  show  the  event  trees  developed  to  identify 
relevant  accident  sequences  in  the  MDB  involving  nonburstered  and  burst- 
ered  munitions,  respectively.  Many  event  sequences  have  been  screened 
out  from  further  analysis  based  on  the  screening  criteria  described 
previously. 

The  accident  sequences  which  survived  the  Initial  screening  and 
have  been  analyzed  further  are  listed  In  Table  7-6.  Several  more 
sequences  were  finally  screened  out  after  some  analysis  were  performed 
on  the  basis  of  the  frequency  screening  criterion  of  10“^®/yr. 

7.2.4. 1.  Earthquake  Accident  Analysis.  The  earthquake  intensity  Is 
usually  given  in  terms  of  maximum  acceleration  (i.e.,  g- level).  There 


is  an  approximate  relationship  between  the  Modified  Mercalll  Intensity 
(MMI)  scale  and  the  g-level.  For  example,  MMI  of  VIII  Is  approximately 
equivalent  to  0.15  to  0.30  g. 

7.1. A. 2.  Releases  from  Earthcuake-Induced  Accidents  In  the  MDB. 
Sequences  P025  to  P03A  Involve  the  earthquake-initiated  events  Inside 
the  MDB.  Lower  Intensity  earthquakes  may  keep  the  munitions  In  the  UPA 
as  well  as  the  agent  collection  tanks  In  the  TOX  Intact  but  could 
Initiate  a  fire  that  could  subsequently  cause  the  thermal  detonation  or 
hydraulic  rupture  of  munitions  In  the  UPA.  Otherwise,  high  Intensity 
earthquakes  could  cause  munitions  In  the  UPA  to  fall  and  be  punctured, 
damage  the  agent  collection  tanks  and  the  piping  system,  and  also  cause 
fire /explosion  due  to  fuel  line  breaks.  The  events  modeled  are 
discussed  below. 

Releases  Involving  Bulk  Containers 

1.  Earthquake  Occurs.  The  Initiating  event  (Event  1)  In 

Fig.  7-A3  Is  earthquake  occurrence  while  bulk  containers 
are  being  processed.  To  simplify  the  event  tree  evaluation. 
Event  1  further  restricts  the  earthquake  intensity  to  an 
acceleration  range  from  g^  to  g^.  Seven  ranges  are  con¬ 
sidered: 


a. 

0.15  g  to  0.2 

;  g- 

b. 

0.2  g  to  0.3 

g- 

c. 

0.3  g  to  O.A 

g- 

d. 

O.A  g  to  0.5 

g- 

e. 

0.5  g  to  0.6 

g- 

f. 

0.6  g  to  0.7 

g- 

g- 

Greater  than 

0.7  g. 

Earthquakes  below  0.15  g  are  not  considered  in  the  analysis 
because  the  damage  probabilities  associated  with  such  tremors 


is  negligibly  small.  Detailed  examinations  o£  seismic  ranges 
above  0.7  g  are  unnecessary  for  the  MDB  because  earthquakes 
above  0.7  g  have  a  probability  of  almost  1.0  of  damaging  the 
MDB.  With  respect  to  the  TOX,  Its  high  seismic  design  crite¬ 
rion  precludes  earthquake  damage  at  frequencies  above  10"^®/yr 
(see  Section  4).  Since  release  scenarios  with  frequencies 
below  10"^®/yr  require  no  detailed  examination,  a  detailed 
event  tree  analysis  of  seismic  ranges  above  0.7  g  Is  also 
unnecessary  relative  to  releases  from  the  TOX. 

The  Initiating  event  frequency  at  each  site  is  the  site- 
specific  frequency  at  which  earthquakes  in  the  range,  gj^  to 
gy,  occur  multiplied  by  the  fraction  of  all  bulk  containers 
processed  at  the  site.  (Note:  since  this  is  classified  infor¬ 
mation,  the  final  frequency  results  will  be  adjusted  accord¬ 
ingly  In  the  classified  appendix.).  For  an  annual  risk  above 
~3  X  10“5/yr,  the  Initiating  event  frequencies  were  taken  from 
Fig.  4-11. 

MDB  Not  Damaged  by  the  Earthquake.  MDB  damage  Is  defined  as 
any  loss  of  the  MDB’s  agent  containment  capability.  This 
Includes  damage  to  the  MDB  confinement  walls  or  the  ventila¬ 
tion  system.  As  long  as  the  MDB  containment  capability  is 
maintained,  any  agent  release  inside  the  MDB  (e.g.,  a  release 
from  a  punctured  munition)  results  in  no  appreciable  release 
to  the  environment.  Event  2  damage  probabilities  are  based 
upon  a  generic  study  of  damage  to  structures  designed  to  the 
UBC. 

The  MDB  (Including  the  pipes  and  ducts)  is  designed  to 
meet  UBC  seismic  standards  which  means  that  the  building  is 
designed  with  a  factor  of  safety  and  should  not  fall  given  an 
earthquake  of  a  certain  magnitude,  depending  on  the  site’s 
seismic  zone  location.  The  CONUS  facilities  are  being 
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designed  for  a  minimum  of  seismic  zone  2  design  earthquakes, 
even  though  some  of  the  sites  may  be  In  seismic  zone  1  (l.e., 
APG,  PBA,  PUDA,  and  UMDA) .  ANAD,  LEAD,  and  NAAP  are  In  seis¬ 
mic  zone  2  while  TEAD  Is  In  seismic  zone  3.  Thus,  the  MDB  at 
TEAO  Is  designed  to  meet  seismic  zone  3  earthquake  standards 
while  the  rest  of  the  sites  are  designed  to  meet  seismic 
zone  2  standards.  The  design  level  for  a  UBC  structure  with 
concrete  walls  (such  as  the  MDB)  Is  0.14  g  for  seismic  zone  3 
and  0.07  g  for  seismic  zone  2.  The  design  safety  factor  Is 
generally  equal  to  2.  More  details  on  the  failure  proba¬ 
bilities  are  presented  In  Appendix  C. 

Earthquake  Impact  on  Munition  Integrity.  The  munitions  In 
the  UPA  represent  a  significant  agent  Inventory.  Event  3 
addresses  whether  the  earthquake  causes  a  release  from  any  of 
these  munitions.  Puncture  is  the  dominant  munition  failure 
mode.  The  puncture  probability  is  the  probability  that  the 
earthquake  causes  an  unpacked  munition  to  fall  from  the  con¬ 
veyor  or  while  it  is  being  placed  on  the  conveyor  (this  prob¬ 
ability  is  conditionally  dependent  on  seismic  intensity)  and 
that  the  fallen  munition  strikes  a  probe  of  sufficient  size 
and  density  to  penetrate  it  (the  probe  penetration  probability 
is  a  function  of  munition  type,  see  Ref.  7-5). 

Packed  munitions  are  not  stacked  in  the  UPA.  Ancillary  stud¬ 
ies  indicate  that  the  probability  that  a  packed  (or  pallet¬ 
ized)  munition  falls  or  is  knocked  over  and  strikes  a  probe  of 
sufficient  size  to  penetrate  It  (including  penetrating  any 
Intervening  packing  material)  is  negligibly  small  relative  to 
the  10“^®/yr  screening  criterion.  Thus,  only  single  munition 
punctures  are  addressed  in  Fig.  7-44. 


TOX  Integrity  Maintained.  The  TOX,  which  may  contain  up  to 
gal  of  agent,  also  represents  a  potentially  significant 
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release  source.  To  minimize  the  potential  of  a  release,  the 
TOX  room,  tanks,  and  piping  are  being  designed  to  meet  the 
more  stringent  NRC  standards  and  can  survive  earthquakes  that 
engender  MOB  damage.  The  design  g-level  has  not  yet  been 


determined  but  the  Intent  Is  to  ensure  that  the  TOX  will  with¬ 


stand  relatively  high  g-forces.  The  same  criteria  will  be 
applied  to  all  sites  regardless  of  the  seismic  zone  location. 
For  this  analysis,  it  is  assumed  that  the  TOX  will  be  designed 
for  a  1-g  safe  shutdown  earthquake  (SSE)  at  all  sites. 


The  high  TOX  design  criterion  virtually  assures  that  TOX 
Integrity  will  be  maintained  after  all  but  the  strongest 
(l.e.,  greater  than  1  g)  earthquakes.  In  order  to  quantify 


this  contention,  it  is  necessary  to  extrapolate  the  seismic 


hazard  model  in  Fig.  A-11  to  higher  acceleration  levels.  This 
extrapolation  is  depicted  in  Fig.  7-45.  The  extrapolation  is 


conservative  for  two  reasons: 


Linear  logarithmic  extrapolation  results  in  the  seis¬ 
micity  models  for  contour  levels  0.05  through  0.20  inter¬ 
secting  the  contour  level  0.40  curve.  Since  the  seismic 
hazard  of  a  geological  region  is  directly  related  to  the 
associated  contour  level  value,  it  is  unlikely  that  the 
seismicity  model  for  a  region  with  a  low  hazard  (e.g.,  a 
0.10  contour  level)  will  intersect  the  seismicity  model 
for  a  region  with  a  larger  seismic  hazard  (e.g.,  a  0.20 


contour  level). 


Most  seismologists  now  believe  that  there  is  a  physical 


upper  limit  to  the  amount  of  seismic  energy  that  the 
earth  can  transmit.  Although  this  upper  limit  depends 
upon  site  specific  geological  characteristics,  for  the 
MDB  sites  being  considered  it  is  estimated  that  this 
upper  limit  restricts  ground  acceleration  to  a  maximum 
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value  of  around  0.6  to  0.8  g.  Therefore,  Fig.  7-45  is 
probably  conservative  by  including  effective  peak 
accelerations  above  0.8  g. 


Figure  7-46  is  the  TOX  fragility  model  corresponding  to  a 
1  g  SSE  design  (Appendix  B  includes  the  TOX  fragility 
model  derivation).  By  combining  Figs.  7-45  and  7-46,  it 
was  determined  that  no  event  sequences  Involving  TOX 
damage  have  a  frequency  of  10“^0/yr  or  greater. 


Ignition  Avoided.  Available  data  indicate  a  high  likelihood 
of  earthquake-induced  fires  in  both  residential  and  commercial 
structures.  Fig.  7-47  is  the  fault  tree  used  to  quantify  the 
probability  that  an  earthquake- initiated  fire  (or  detonation) 
originates  in  the  MDB. 


Three  mechanisms  for  ignition  are  identified.  The  first 
Involves  combustible  material  ignition  by  hot  process  equip¬ 
ment  (e.g.,  a  kiln  or  burner).  Because  of  the  high  operating 
temperatures  of  this  equipment,  the  ignition  probability  for 
Event  XI  is  essentially  the  probability  that  combustible  mate¬ 
rial  remains  in  contact  with  a  hot  surface  long  enough  to 
ignite.  If  the  MDB  is  not  damaged  by  the  earthquake  the  Event 
XI  probability  is  small  relative  to  the  probability  of  igni¬ 
tion  from  other  mechanisms  identified  in  Fig.  7-47.  However, 
if  the  MDB  is  damaged  by  the  earthquake,  the  Event  XI  proba¬ 
bility  is  essentially  unity. 


Natural  gas  ignition  can  result  in  either  a  fire  or  a  detona¬ 
tion,  depending  upon  the  MDB  integrity.  If  the  MDB  is  Intact, 
it  is  expected  that  detonation  will  result  from  a  natural  gas 
ignition.  However,  if  the  MDB  is  damaged  by  the  earthquake, 
the  buoyant  natural  gas  cannot  readily  form  a  large  detonable 
mass.  Therefore,  Fig.  7-47  models  fire  as  the  consequence  of 
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Fig.  7-47.  Phenomenological  fault  tree  for  Ignition  occurrence 
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natural  gas  ignition  when  the  MDB  is  damaged  by  the  earth¬ 
quake,  and  detonation  as  the  consequence  of  natural  gas 
Ignition  when  the  MDB  is  intact. 


Three  criteria  must  be  satisfied  for  natural  gas  to  ignite 
inside  the  MDB: 

a.  A  natural  gas  line  leak  must  occur  Inside  the  MDB. 

b.  A  supply  of  natural  gas  must  be  available  from  the 
external  distribution  system. 

c.  An  ignition  source  is  required. 

The  third  ignition  mechanism  addressed  in  Fig.  7-47  is  an 
electrical  fire.  The  conditions  necessary  for  an  electrical 
fire  are: 

a.  An  electrical  fault  (i.e.,  arcing)  inside  the  MDB. 

b.  A  supply  of  electric  power  to  the  faulted  equipment. 

Event  X3  is  an  Important  factor  in  evaluation  Fig.  7-47 
because  available  data  Indicate  that  offsite  power  can  be 
lost  at  a  relatively  low  seismic  intensity. 

6.  Fire  Suppression  Successful.  Successful  fire  suppression  is 

defined  as  extinguishing  a  fire  before  it  increases  the  amount 
of  agent  available  for  release  to  the  environment.  The  UFA 
and  TOX  are  the  major  areas  of  concern.  Since  the  TOX  tank  is 
vented,  over  pressurization  is  not  a  problem.  Moreover,  the 
temperatures  produced  by  a  fire  are  insufficient  to  directly 
fall  the  tank  or  agent  piping.  Hence,  the  principal  concern 
is  thermal  failure  of  munitions  in  the  UFA. 

Fig.  7-48  is  the  fire  suppression  success  tree.  If  the  fire 
originates  in  the  UFA  (Event  XI),  30  min  are  available  to 
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suppress  it  before  the  bulk  containers  fail.  If  the  MDB  is 
Intact  (i.e.,  it  has  not  been  damaged  by  either  the  earthquake 
or  a  natural  gas  detonation),  applicable  data  indicate  a  76% 
chance  of  successfully  suppressing  the  fire.  If  the  MDB  is 
damaged,  the  likelihood  of  suppressing  a  UFA  fire  within 
30  min  is  effectively  zero. 

Fires  that  originate  outside  the  UFA  must  propagate  to  the  UFA 
and  burn  for  30  min  before  any  bulk  containers  fall  (Gate  G3 
in  Fig.  7-A8).  If  the  MDB  is  Intact,  the  fire  walls  preclude 
the  propagation  to  the  UFA.  If  the  MDB  is  damaged  by  the 
earthquake,  the  probability  of  Event  XA  is  predicated  upon 
extrapolating  a  fire  propagation  model  developed  for  nuclear 
power  plants,  and  is  a  function  of  the  distance  from  the  fire 
to  the  UFA.  Finally,  if  the  MDB  is  damaged  by  a  natural  gas 
detonation,  successful  fire  suppression  is  conservatively 
Ignored. 

Event  6  is  quantified  with  respect  to  whether  the  fire  damages 
any  containers  in  the  UFA.  However,  if  agent  is  released  from 
the  TOX,  the  dispersion  mechanism  is  dependent  upon  agent  com¬ 
bustion.  Agent  dispersion  with  combustion  occurs  only  if  any 
one  of  the  following  conditions  is  satisfied: 

a.  Natural  gas  detonation  occurs. 

b.  The  TOX  and  MDB  are  both  damaged  and  a  fire  occurs. 

Releases  Involving  Burstered  Munitions 

The  salient  differences  between  Figs.  7-A3  and  7-AA  relate  to 
Events  1,  3,  5,  and  6.  The  initiating  event  frequency  (Event  1)  in 
Fig.  7-3A  is  the  site-specific  frequency  at  which  earthquakes  in  the 
range,  gj^  to  g,_j,  occur  multiplied  by  the  fraction  of  all  munitions  that 
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will  be  processed  et  the  site  that  are  burstered  (this  will  be  given  In 
the  classified  appendix) . 


In  addition  to  puncture,  detonation  Is  an  Important  failure  mode 
when  burstered  munitions  are  being  processed  (Event  3,  Fig.  7-A4).  If 
the  earthquake  causes  a  munition  detonation  In  the  UFA,  the  probabili¬ 
ties  of  Ignition  and  successful  fire  suppression  (Events  5  and  6)  are 
altered.  Specifically,  the  conditional  Ignition  probability  Is  unity, 
subsequent  to  a  munition  detonation  In  the  UFA.  Moreover,  a  munition 
detonation  In  the  UFA  essentially  precludes  successful  fire  suppression. 
If  the  earthquake  causes  a  fire  but  does  not  directly  detonate  any  muni¬ 
tions,  the  fire  suppression  probability  Is  quantified  with  the  Fig.  7-12 
success  tree.  However,  the  time  available  to  suppress  the  fire  Is  only 
10  min  for  burstered  munitions  and  there  Is  no  Intervention  from  plant 
personnel  or  site  fire  fighters. 

Uncertainties  for  the  MDB  earthquake  events  were  evaluated  as 
follows : 


Event  1:  Earthquake  Occurs 

The  uncertainty  In  the  Initiating  event  frequency  is  represented  by 
a  lognormal  distribution  with  an  uncertainty  factor  of  10  and  a  median 
value  equal  to  the  point  frequency  estimate.  This  is  predicated  upon 
the  generic  guidelines  Issued  for  the  uncertainty  assessment  (see 
Table  5-21). 


Event  2;  MDB  Not  Damaged  by  the  Earthquake 


Uncertainty  factors  for  MDB  damage  probabilities  above  0.1  will 
also  be  taken  from  Table  5-21.  For  failure  probabilities  below  0.1  an 
uncertainty  factor  of  3  Is  assigned.  The  uncertainty  distribution  In 
each  case  Is  lognormal  with  a  median  equal  to  the  MDB  failure 
probability. 


Event  3;  Earthquake  Impact  on  Munition  Integrity 


Table  5-21  recommendations  for  probabilities  of  0.1  or  greater  are 
applicable  to  the  uncertainty  In  the  probability  that  a  munition  falls 
from  the  conveyor.  An  uncertainty  factor  of  5  is  applied  to  Pp  -  the 
conditional  probability  that  a  munition  Is  punctured  subsequent  to  a 
fall.  Since  all  event  sequences  Involving  a  munition  detonation  have 
frequencies  below  10~^0/yr,  they  require  no  uncertainty  analysis.  The 
uncertainty  distributions  for  the  Event  3  parameters  are  lognormal  with 
medians  equal  to  the  point  probability  estimates. 

Event  A;  TOX  Integrity  Maintained 

Uncertainty  factors  for  TOX  damage  probabilities  above  0.1  will 
also  be  taken  from  Table  5-21.  For  failure  probabilities  below  0.1  an 
uncertainty  factor  of  3  Is  assigned.  The  uncertainty  distribution  in 
each  case  Is  lognormal  with  a  median  equal  to  the  TOX  failure 
probability. 

Event  5:  Ignition  Avoided 

The  Event  5  uncertainty  results  from  the  uncertainties  In  the 
following  functions  and  parameter. 

1.  fx2  (x)  probability  density  function  for  inside  pipe 
failure. 

2.  fx3  (x)  -*  probability  density  function  for  underground  pipe 
failure. 

3.  Pr  (X4)  natural  gas  Ignition  probability. 

A.  fx5L  probability  density  function  for  light  fixture 

failure. 
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fy^T  (x)  '*  probability  density  function  for  industrial  circuit 
failure. 


6.  fx6  (x)  •*  probability  density  function  for  offsite  power  loss. 


In  general: 


fj  (X) 


Pr,j  X 


-lln(x)  -  ln(aj  gu.j)]2 


Moreover t  the  uncertainty  in  each  Event  5  fragility  is  a  function  of  the 
uncertainty  on  as  was  described  previously  for  warehouse  fires. 

From  Table  5-20,  the  uncertainty  factors  for  Cu,X5L  ^U,x6  ^ 

1.5,  respectively.  Uncertainty  factors  for  eu,X2  ^U,X5I  from 
the  Zion  amd  Seabrook  PRAs.  The  value  of  £UyX2  directly  applicable 
to  the  MDB,  but  the  uncertainty  factor  for  Cu,X51  obtained  from  the 
Seabrook  data  plus  an  additional  factor  of  2  that  arises  from  concerns 
about  the  applicability  of  a  nuclear  data  base  on  the  MOB  design. 

The  major  uncertainty  in  applying  a  generic 

Modified  Mercalll  fragility  model  to  the  MDB.  Depending  upon  the  actual 
soil  conditions  and  pipeline  characteristics,  the  median  failure 
threshold  can  vary  about  the  nominal  value  by  a  factor  of  2.  Thus,  an 
uncertainty  factor  of  2  is  adopted  for  ey^xS* 

Approximately  a  binominal  distribution  with  a  normal  distribution, 
the  uncertainty  factor  for  Pr  (X4)  is  1.5.  A  lognormal  distribution  is 
modeled.  These  results  are  tabulated  in  Table  7-10. 

Event  6:  Fire  Suppression  Successful 

The  uncertainty  in  most  fire  suppression  model  functions  and 
parameters  (e.g.,  the  probability  of  a  pipe  failure  or  loss  of  offsite 
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TABLE  7-10 

EVENT  5  STATISTICAL  PARAMETERS 


Parameter 

Median 

Uncertainty 

Factor 

^U,X2 

1 

2.2 

«U,XE 

1 

2.0 

Pr  (X4) 

0.0067 

1.5 

«U,X5L 

1 

2.0 

«U,X5I 

1 

2.8 

^U,X6 

1 

1.5 
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power)  was  previously  addressed  for  Event  5. 
parameters  require  uncertainty  models: 


Only  three  additional 


1.  Operator  error  probability. 

2.  Damper  failure  probability. 

3.  Fire  suppression  failure  probability. 


According  to  Information  from  Battelle-Columbus ,  the  uncertainty  In  the 
operator  error  probability  Is  lognormally  distributed  with  an 
uncertainty  factor  of  10  and  a  median  equal  to  the  error  probability. 
Data  In  EGG-EA5887  support  a  similar  model  for  the  damper  failure 
probability.  The  fire  propagation  probability  has  a  lognormal 
distribution  with  an  uncertainty  factor  of  3  for  fires  originating 
outside  of  the  UFA.  For  fire  suppression  inside  the  UFA  the  Table  5-21 
guidelines  are  recommended.  In  both  cases  the  nominal  probabilities 
represent  distribution  medians. 


7. 2. A. 3.  Earthquake- Induced  Releases  Involving  the  Outdoor  Agent  Piping 
System  at  TEAD.  The  analysis  of  the  earthquake  scenarios  Involving  the 
MDB  for  the  modified  CAMDS  facility  at  TEAD  includes  the  rupture  of  the 
agent  piping  system  between  the  BOS  and  the  TOX  at  TEAD.  The  agent  pipe 
line  is  assumed  to  be  double  walled  and  approximately  330  ft  long.  The 
analysis  also  assumes  that  this  pipe  will  be  designed  to  NRC  standards 
which  means  that  the  pipe  should  not  fall  at  1.0-g  earthquake. 


7.2.5.  Quantification  of  Logic  Models 


The  data  base  used  for  the  quantification  of  the  external  event 
sequences  are  presented  In  Table  7-9  and  In  Tables  7-11  through  7-13. 


7.2.5. 1.  Tornado  Accident  Frequencies.  The  data  base  used  for  the 
accident  scenario  analysis  is  listed  In  Table  7-9.  The  site-specific 
tornado  frequency  versus  velocity  curves  have  been  presented  in  Sec¬ 
tion  A.  Two  types  of  missiles  were  initially  considered;  a  (1)  3-in. 
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TABLE  7-11 

DATA  BASE  FOR  METEORITE  INITIATED  PLANT  ACCIDENT  SEQUENCES 


24-Jui-fl7  Paqe  1 


DiCa  Base  For  Meteorite  Initiated  Plant  i^ccident  Scenarios 


Event 

Site 

Hunitiofi  / 

structure 

Variable 

Input  Data 

Error 

Reference 

1.  Frequency  at  aeteorite 

fill 

All 

METEOR 

4.4E-13 

l.OE+01 

Ret.  1-8 

strike  levents/sq-Ft-yri 

2.  Probability  lunition  in 

fill 

Both 

MEIB 

2,4E-i:i6 

l.OE+01 

See  calc  sheets 

igloo  breached 

4.2-in  tort 

MEID 

1.6E-04 

CR^^- 7-3:) 

lOS-aa  catrg 

HEIC 

9.7E-07 

ton  contnr 

HEIK 

3.3E-06 

line 

MEIN 

2.4E-06 

155-11  proj 

MEIP 

7,4E-07 

8-in  proj 

MEIQ 

7,4E-07 

rocket 

MEIR 

3,3E-06 

sp.  tank 

MEI5 

5i6E-(i6 

Z,  Probability  lunition  in 

fill 

Bqib 

MEUPB 

7.9E-04 

l.OE+Ol 

See  calc  sheets 

UFA  breached 

4.2-in  sort 

MEUFD 

5.5E-04 

CRjU.7-  ^3 

105-11  catrg 

MEUPC 

3.0E-04 

ton  contnr 

MEUPK 

l.lE-03 

line 

HEUPN 

7.9E-04 

155-11  proj 

HEUPP 

2.4E-04 

B-in  proj 

MEUPa 

2.4E-04 

rocket 

MEUPR 

l.lE-03 

SD.  tank 

NEUPS 

1.8E-03 

4.  Probability  TOt  is  breacneo 

All 

all 

HETOt 

1.2E-05 

l.yE+Ol 

7-3 

5.  Probabilitv  outsiae  agent 

TEAD 

Ploe 

MEPIPE 

7.2E-02 

S.OEHiO 

7-3 

pipe  breached 

6.  Target  area  <sq-ic! 

Hi! 

Iqioo 

IGL 

V,6E+02 

none 

7-3 

UPh 

UPA 

5.7E+'i3 

none 

lul 

mDB 

4.4Er04 

>7o^e 

! 

Pioe 

PIPE 

6.6E+02 

none 
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TABLE  7-12 

EFFECTIVE  TARGET  AREA  FOR  AIRCRAFT  CRASH  ANALYSIS 


b.  f  t  >3  c  t  i  'J  e  r  a  r  g  e  t  A  r  e  a  ( 3  q  -  M  i  <  D  i  r  e  c  ■  3  r  ■  a.  a  1 


SITE 


VkAR  .!.  r'-iBLE  rJAl'IE  AREA 


(C) 


(D  i 


30--FT  IGLOG  IGL80DR 
MDB  MDBDR 

CAHDS  PIPE  CDSPI 


7.  60E . ^'5 

.1 . 77E  ~0'S 
1  .  1 3E--03 


Effect! 

SITE 

( 3 ) 

□0-FT  I 
piDFi 


ve 


Target  Area  (Sq-Mi)  Indire 

VARIABLE  NAME  AREA  (SQ- 

( C )  ( D ) 

GO  IGL30IR  7,2 

MDBIR  l„2 


ct  Gi  'a.  e 
M  T 

6E-'-' .j  Z 
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TABLE  7-13  (Continued) 


TABLE  7-13  (Continued) 


pipe  and  a  (2)  utility  pole.  For  all  munition  types,  it  was  found  that 
the  utility  pole  had  a  higher  probability  of  penetrating  munitions  in 
the  UFA  and  the  igloo  (with  a  steel  door).  Hence  the  data  shown  in 
Table  7-9  apply  only  to  the  cases  where  a  utility  pole  was  the  missile. 
Also  shown  In  the  table  are  the  error  factors  assigned  to  each  variable. 
In  many  cases  there  was  Insufficient  statistical  information  to  ade¬ 
quately  assess  the  data  uncertainty  and,  therefore,  the  assignment  of 
error  factors  was  by  engineering  Judgment.  The  results  of  the  accident 
frequency  analysis  are  presented  in  Table  7-14.  All  the  accident  sce¬ 
narios  were  screened  out  on  the  basis  of  1  x  10”^®) /yr  frequency 
criterion. 

7. 2. 5. 2.  Meteorite  Strike  Frequencies.  The  data  base  used  for  the 
accident  scenario  analysis  is  presented  in  Table  7-11.  More  details  on 
the  derivation  of  these  values  are  given  in  the  calculation  sheets 
(Ref.  7-5).  The  results  of  the  accident  frequency  analysis  are  pre¬ 
sented  in  Table  7-14.  As  Indicated  in  the  results,  the  frequencies  of 
meteorite- initiated  accidents  for  all  scenarios  are  below  10"l®/yr  and 
hence  these  scenarios  have  been  screened  out  from  further  analysis. 

7. 2. 5. 3.  Aircraft  Crash  Frequencies.  The  data  used  in  the  analysis  of 
the  aircraft  crash  accidents  are  presented  in  Tables  7-12  and  7-13.  The 
derivation  of  the  aircraft  crash  frequency  values  at  each  site  has  been 
discussed  in  Section  4.  The  results  of  the  analysis  are  shown  in 
Table  7-14.  The  following  scenarios  can  be  screened  out  on  the  basis  of 
the  1.0  X  10"^®/yr: 

Foil  -  Direct  large  aircraft  crash  onto  the  MHI;  fire  contained  in 
0.5  h. 

F014  -  Direct  large  aircraft  crash  onto  the  MDB;  fire  contained  in 
0.5  h. 

P015  -  Indirect  large  aircraft  crash  onto  the  MHI;  no  fire. 
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TABLE  7-14  (Continued) 


TABLE  7-14  (Continued) 
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P016  -  Indirect  large  aircraft  crash  onto  the  MHI;  fire  not  con¬ 
tained  In  0.5  h. 

P017  -  Indirect  large  aircraft  crash  onto  the  MHI;  fire  contained 
In  0.5  h. 

P020  -  Indirect  large  aircraft  crash  onto  the  MDB;  fire  contained 
In  0.5  h. 

There  Is  very  little  distinction  In  the  frequency  of  aircraft 
crashes  with  or  without  fire  since  the  historical  data  Indicate  that 
there  Is  only  a  45Z  probability  that  an  aircraft  crash  will  Involve  a 
fire.  The  frequency  of  a  crash  onto  the  MDB  Is  greater  than  the  MHI 
because  the  surface  area  of  the  MOB  Is  more  than  100  times  larger  than 
the  MHI. 

For  the  regional  collocation  option,  it  Is  evident  that  large  air¬ 
craft  crashes  occur  more  frequently  at  ANAD  than  TEAD.  The  frequency  of 
an  aircraft  crash  onto  the  outdoor  agent  piping  system  for  the  modified 
CAMDS  facility  Is  a  dominant  risk  contributor.  This  scenario  includes 
both  large  and  small  aircraft  crashes  and  the  frequency  of  small  air¬ 
craft  crashes  (Including  helicopters)  is  at  least  two  orders  of  magni¬ 
tude  higher  than  the  frequency  of  large  aircraft  crashes  at  TEAD. 

7. 2. 5. A.  Earthquake-Induced  Accident  Frequencies.  Reference  7-5 
contains  the  frequency  and  failure  probability  data  for  each  event 
modeled  In  the  event  trees  that  served  as  Input  data  for  the  analysis  of 
the  accident  scenario  frequencies.  The  results  of  the  frequency 
analysis  are  presented  In  Table  7-14.  The  earthquake  accident 
frequencies  for  the  scenarios  analyzed  are  generally  higher  at  TEAD 
since  It  Is  located  In  a  more  earthquake-prone  region.  Sequence  P033, 
which  postulates  an  earthquake- Initiated  munition  fall  and  fire  but  with 
the  MDB  and  TOX  Intact,  has  the  highest  frequency  value  (1.7  x  10~^/yr 
for  ANAD  and  4.8  x  lO'^/yr  for  TEAD).  This  scenario  involves  the 


detonation  of  all  munitions  (If  burstered)  In  the  UFA  since  fire  Is  not 
suppressed.  The  agent  release  results  are  discussed  In  Section  10. 

7. 2. 5. 5.  Uncertainty  Analysis.  The  results  of  the  uncertainty  analysis 
Indicate  that  the  95Z  percentile  values  may  be  7  to  20  times  higher  than 
the  reported  median  values.  The  uncertainties  arise  mainly  from  the 
general  applicability  of  the  raw  data  used  to  the  perceived  conditions 
of  environment  of  a  demilitarization  program. 
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8.  SCENARIO  LOGIC  MODELS  FOR  TRANSPORT 


This  section  describes  the  development  of  accident  scenarios  for 
onsite  (truck)  transport  from  the  storage  area  to  the  disposal  facility 
(MHI).  The  work  was  performed  by  H&R  Technical  Associates,  Inc.  The 
analysis  covers  only  the  actual  transport;  risks  associated  with  load¬ 
ing,  unloading,  and  other  handling  activities  are  considered  as  part  of 
the  handling  phase  In  Section  6.  Risks  while  the  munitions  are  In  stor¬ 
age  awaiting  transport  are  treated  In  Section  5. 

Section  8.1  discusses  logic  models  for  accident  scenarios  during 
transport  by  truck.  Note  that  the  onsite  transport  scenarios  are 
developed  In  terms  of  risk  per  mile. 

8.1.  ONSITE  TRANSPORT 


8.1.1.  Chronology  of  Operations 


Figure  3-1  shows  a  flow  diagram  of  the  handling  and  transport  oper¬ 
ations  associated  with  the  onsite  disposal  option.  The  munitions  in 
ONCs  are  taken  by  truck  from  their  storage  locations  to  the  disposal 
area  Munitions  Holding  Igloo.  Exceptions  are  noted  for  APG  and  NAAP, 
where  the  distance  Is  so  short  that  forklifts  (handling  phase)  are  used 
Instead. 


A  set  of  14  accident  sequences  involving  collisions,  overturns, 
fires,  and  external  eveants  was  developed  (Section  8.1.3).  The 
sequences  are  designated  as  VO.  Table  8-1  summarizes  the  sequences 
analyzed. 


TABLE  8-1 

SUMMARY  OF  TRUCK  TRANSPORT  ACCIDENT  SEQUENCES 


VOl  A  munitions  vehicle  collision/overturn  occurs  and  crush  forces 
fall  the  agent  containment 

V02  A  munitions  vehicle  collision/overturn  occurs  and  impact  forces 
fail  the  agent  containment 

V03  A  munitions  vehicle  collision/overturn  occurs  and  puncture  forces 
fail  the  agent  containment 

VOA  Detonation  of  burstered  munitions  occurs  by  either  (1)  a  fire-only 
accident,  (2)  an  accident  with  mechanical  force  and  fire,  (3)  a 
truck  collision/overturn  causing  impact-induced  rocket  propellant 
ignition,  or  (4)  a  truck  collision/overturn  causing  undue  force 
detonation 

VOS  A  munitions  vehicle  accident  with  fire  occurs  causing  nonburstered 
munitions  to  fall 

V06  An  aircraft  crashes  on  a  munitions  vehicle.  No  fire  occurs; 
impact  forces  fail  the  agent  containment 

V07  An  aircraft  crashes  on  a  munitions  vehicle.  Fire  occurs,  but 
impact  fails  agent  containment 

VOS  Deleted  due  to  scenario  revisions 

V09  A  severe  earthquake  occurs,  causing  a  munitions  vehicle  accident, 
and  crush  forces  fail  the  agent  containment 

VOlO  A  severe  earthquake  occurs,  causing  a  munitions  vehicle  accident, 
and  impact  forces  fail  the  agent  containment 

VOll  A  severe  earthquake  occurs,  causing  a  munitions  vehicle  accident, 
and  puncture  forces  fail  the  agent  containment 

V012  A  severe  earthquake  occurs,  causing  a  munitions  vehicle  accident, 
and  fire  detonates  burstered  munitions 

V013  A  severe  earthquake  occurs,  causing  a  munitions  vehicle  accident, 
and  fire  fails  nonburstered  munitions 

V014  A  tornado  occurs,  generating  a  missile  or  causing  a  truck 
overturn,  and  mechanical  forces  fail  agent  containment 

V015  An  earthquake  or  tornado  occurs,  generating  undue  mechanical 
forces  which  cause  detonation  of  burstered  munitions. 


8.1.2.  Procedures  and  Assumptions 


For  this  analysis  It  was  assumed  that  all  munitions  vrlll  be  placed 
Inside  cylindrical  ONC  packages  with  outer  dimensions  of  approximately 
8  ft  long  by  6  ft  diameter  (with  failure  thresholds  as  discussed  In 
Section  3.3)  prior  to  any  movement.  It  was  also  assumed  that  a  flatbed 
truck  will  be  used  as  the  transport  vehicle.  Each  truck  will  carry  four 
ONCs  except  spray  tanks,  which  are  trucked  two  at  a  time.  Vehicle 
capacities  for  each  munition  are  shown  In  Table  8-2. 

A  five-vehicle  convoy  will  be  used  to  transport  munitions  onsite. 
There  Is  a  lead  security  vehicle,  one  munition  vehicle,  a  decontamina¬ 
tion  vehicle,  an  emergency  vehicle,  and  a  following  security  vehicle 
(Ref.  8-1).  The  small  distance  that  the  convoy  travels,  and  the  small 
number  of  trucks  per  convoy,  make  traffic  control  feasible  to  provide 
front,  rear,  and  side  collision  protection.  The  major  controls  that 
affect  the  truck  accident  rate  are: 


1.  No  other  movement  activities  or  other  activities  which  might 
pose  a  hazard  to  the  munitions  will  be  allowed  to  be  carried 
out  within  500  ft  of  the  convoy  route  during  munitions  trans¬ 
port  . 

2.  No  fires  external  to  the  cargo  will  last  longer  than  10  min 
due  to  limits  placed  on  the  amount  of  truck  fuel  available. 

3.  Truck/ train  collisions  are  not  credible  because  of  the  escort 
and  the  absence  of  train  traffic  during  convoy  movement. 

A.  No  munitions  movement  will  take  place  during  periods  of 

extreme  weather  conditions  such  as  storms,  tornado  advisor¬ 
ies,  and  blizzards,  although  a  fully  loaded  truck  may  have  to 
remain  at  rest  during  the  bad  weather. 


m 
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TABLE  8-2 

VEHICLE  CAPACITIES  FOR  EACH  MUNITION 


Munitions 

Pallets 

Munitions 

Packages 

Munitions 

Per 

Per 

Per 

Per 

Per 

Munition 

Pallet 

Package 

Package 

Truck 

Truck 

M55  rocket 
105-mm  cartridge 
lOS-nrn  projectile 
155-min  cartridge 
155-inm  projectile 
4.2-ln.  mortar 
8-ln.  projectile 
M23  land  mine 
MC-1  750-lb  bomb 
MK-94  500-lb  bomb 


Spray  tank  with 
overpack 


Ton  container 


m 
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Using  this  convoy  model,  several  general  assumptions  can  be  made 
about  the  types  of  accidents  that  are  possible: 

1.  Head-on  collisions  with  a  munitions  vehicle  are  not  credible. 

2.  Collisions  In  ^d\lch  a  munitions  vehicle  rear-ends  another 
vehicle  are  low-speed  events  limited  by  convoy  speed. 

3.  Collisions  In  vdilch  a  munitions  vehicle  hits  a  stationary 
object  or  overturns  arc  low-speed  events  limited  by  convoy 
speed. 

A.  Collisions  In  which  a  munitions  vehicle  Is  rear-ended  by 

another  vehicle  are  low-speed  events  limited  by  convoy  speed. 

5.  -  Collisions  In  which  a  munitions  vehicle  Is  struck  from  the 

side  are  not  credible  because  of  restrictions  on  other  move¬ 
ment  activities  during  convoy  movement. 

These  assumptions  limit  the  type  of  accident  scenarios  envisioned 
for  local  munition  transport  to  truck  collisions  and  overturns,  sponta¬ 
neous  fires,  and  nonpreventable  external  events  such  as  aircraft 
crashes,  earthquakes,  and  tornadoes  during  transport. 


8.1.3.  Accident  Scenario  Analysis 


Section  4.1  describes  the  logic  for  initiating  event  selection  of 
onsite  transport  accidents.  Table  A-A  shows  four  families  of  Initiating 
events:  (1)  truck  collision  or  overturn  accident  due  to  human  error  or 

equipment  failure,  (2)  aircraft  crash  into  the  truck,  (3)  earthquake- 
induced  collision  or  overturn,  and  (A)  tornado-caused  collision/overturn 
or  missile  Impact.  These  four  IE  families  were  used  to  develop  the 
scenario  event  trees  as  described  In  the  subsections  below. 


8. 1.3.1.  Truck  Collision/Overturn.  Figure  8-1  shows  the  event  tree 
for  truck  collision  or  overturn  due  to  human  error  or  mechanical  fail¬ 
ure.  There  are  five  Important  sequences  (VOl  through  VOS)  resulting 
from  this  scenario,  differentiated  by  the  types  of  force  that  could 
cause  agent  release  (crush,  Impact,  puncture,  and  fire).  These  are 
sequences  VOl  through  VOS  (Table  8-1). 

Data  base  Information  (Refs.  8-1  through  8-5)  regarding  the  Initi¬ 
ating  event  frequency  Is  described  In  Section  9.2.  For  generic  highway 
accidents  that  rate  Is  2.5  x  10~^  colllslons/overturns  per  mile.  How¬ 
ever,  this  rate  Is  modified  for  the  use  of  convoy  and  administrative 
controls  (Table  9-1).  The  convoy  speed  will  be  selected  so  that  the 
maxlmvun  velocity  at  which  a  collision  or  rollover  Involving  a  munitions 
vehicle  can  occur  In  convoy  conditions  Is  estimated  to  be  no  greater 
than  30  mph,  even  assuming  gross  driver  error  or  mechanical  failure 
(e.g.,  brakes)  on  a  hill.  Because  the  convoy  Is  moving  at  low  speed 
relative  to  highway  traffic  and  under  closely  controlled  conditions, 
the  time  allowed  for  driver  response  to  threatening  conditions  Is  much 
greater  at  the  lower  speed,  and  collision- type  accidents  and  overturnr 
type  accidents  are  more  avoidable.  Convoy  accident  frequencies  have 
been  decreased  by  a  factor  of  10  from  highway  accident  frequencies 
because  of  greater  driver  awareness  and  control  during  convoy  condi¬ 
tions.  The  probability  of  accidental  collisions  and  overturns  Involving 
mechanical  forces  thus  becomes  1.4  x  10~^  per  mile.  Mechanical  force 
accident  scenarios  represent  83%  of  the  total  accidents  expected. 

Fires  can  break  out  In  the  cargo  and  In  the  vehicle  without  the 
occurrence  of  a  mechanical  force  accident.  The  SNL  standard  highway 
frequency  for  this  type  of  accident  Is  2.8  x  10~^  per  mile.  The  use  of 
convoy  controls  does  not  change  the  probability  of  a  fire  occurring,  so 
the  accident  rate  used  for  convoy  traffic  Is  unchanged.  Fire-only 
scenarios  represent  17%  of  the  total  accidents  expected. 


The  probabilities  of  mechanical  forces  ( crush t  Impact,  and  punc¬ 
ture)  being  generated  in  a  truck  accident  were  taken  from  Ref.  8-2. 

These  values  are  consistent  with  the  data  in  Ref.  8-3.  The  probability 
of  an  undue  mechanical  force  causing  burster  detonation  was  derived  from 
the  truck  velocity  data  In  Ref.  8-1,  assuming  a  log  normal  distribution 
with  a  50?  probability  of  detonation  at  123  mph  and  a  10"®  probability 
at  135  nq>h  (Ref.  8-6). 

The  probabilities  of  the  top  events  of  the  event  tree  in  Fig.  8-1 
are  discussed  in  Tables  8-3  through  8-7  for  the  munitions  in  ONCs. 


8. 1.3.2.  Aircraft  Crash.  Figure  8-2  shows  the  event  tree  for  aircraft 
crash  into  a  truck.  The  initiating  event  frequency  is  discussed  and 
quantified  in  Section  4.2  in  terms  of  number  of  crashes  of  small  and 
large  aircraft  per  year  at  each  site  (Table  4-6).  Aircraft  crash 
values  from  Table  4-6  were  multiplied  by  a  factor  of  0.313  to  account 
for  uncontrolled  crashes.  An  uncontrolled  crash  is  defined  as  one  where 
the  impact  angle  is  greater  than  10  deg.  It  was  assumed  that  for  an 
aircraft  to  actually  hit  a  truck,  the  crash  would  have  to  be  uncon¬ 
trolled.  An  inherent  assumption  is  that  an  accident  involving  an  air¬ 
craft  crashing  onto  a  munitions  vehicle  more  closely  resembles  the 
Sandla  National  Laboratory  (SNL)  model  of  a  typical  aircraft  crash 
rather  than  the  SNL  model  of  a  typical  truck  crash.  In  a  typical  SNL 
aircraft  crash,  the  crush  and  puncture  forces  are  negligible  compared 

to  the  impact  forces.  Further  details  are  available  in  Ref.  8-1. 

There  are  two  important  accident  sequences  resulting  from  the  air¬ 
craft  crash  event  tree,  V06  and  V07.  These  are  described  and  quantified 
in  Tables  8-8  and  8-9. 

8. 1.3.3.  Earthquake.  Figure  8-3  shows  the  event  tree  for  the  earth¬ 
quake  occurrence  impact  on  onsite  transport.  Section  4.2  presents 
earthquake  frequencies  as  a  function  of  earthquake  intensity  and  site. 

In  this  study,  an  earthquake  intensity  of  0.5  g  is  assumed  to  be  needed 


TABLE  8-3 

ONSITE  TRANSPORT  SEQUENCE  1 


VOl  -  A  truck  collision/overturn  occurs  In  which  the  munitions  are 
subjected  primarily  to  crush  forces  with  other  forces  being 
negligible.  The  agent  release  frequency  is  the  product  of 
three  basic  events:  BE31t  BE68,  and  BE73. 


Event 

No. 

Name 

Probability 

Re  f  e  r ence / Remarks 

BE31 

Truck  collision/ 
overturn 

1.4  X  10-7 
per  mile 

Table  9-1 

BE68 

Crush  force 
generated 

1.0 

Reference  8-2 

BE73 

Crush  force 
falls  agent 
containment 

0.1 

The  crush  fallue  threshold  of 
each  munition  is  greater  than 
50,000  lb,  therefore  this  is  a 
conservative  value  for  failure 
of  agent  containment. 

Thirteen  percent  of  the  time,  the  release  is  an  agent  spill  only; 
however,  7Z  of  the  time  fire  is  also  present,  resulting  in  some 
unburned  vapor  release  to  the  atmosphere. 


TABLE  8-4 

ONSITE  TRANSPORT  SEQUENCE  2 


A  truck  colllslon/ovcrturn  occurs  In  which  munitions  are  sub¬ 
jected  primarily  to  Impact  forces  with  other  forces  being 
negligible.  The  agent  release  frequency  Is  the  product  of 
three  basic  events:  6E31t  BE60,  and  BE71. 


Event 

No. 


Probability 


Truck  collision/ 
overturn 


1.4  X  10-7 
per  mile 


Iiiq>act  force 
generated 


Impact  force 
falls  agent 
containment 
035  mph) 


Reference /Remarks 


Table  9-1 


Reference  8-2 


The  lnq>act  failure  threshold 
for  the  package  Is  35  mph. 

The  maximum  postulated  Impact 
velocity  in  any  accident  is 
30  iiq>h,  thereafter,  the  proba¬ 
bility  of  agent  release  due  to 
Impact  to  zero,  or  very  close 
to  It,  signified  by  epsilon 

(e). 


M 


TABLE  8-5 

ONSITE  TRANSPORT  SEQUENCE  3 

VOS  -  A  truck  collision/overturn  occurs  In  which  the  munitions  are 
subjected  primarily  to  puncture  forces  with  other  forces 
being  negligible.  The  agent  release  frequency  is  the  prod¬ 
uct  of  three  basic  events:  BE31«  BE64,  and  BE67. 


Event 


No. 

Name 

Probability 

Reference /Remarks 

BE31 

Truck  collision/ 
overturn 

1.4  X  10-7 
per  mile 

Table  9-1 

BE64 

Puncture  envi¬ 
ronment  occurs 

1.64  X  10-2 

Reference  8-2 

BE67 

Probe  fails 
agent  contain¬ 
ment 

2.4  X  10-2 

Reference  8-2 

93X  of  the  time  the  consequence  is  an  agent  spill  only;  however,  7% 
of  the  time  fire  is  also  present,  resulting  in  some  unburned  vapor 
release  to  the  atmosphere. 


TABLE  8-6 

ONSITE  TRANSPORT  SEQUENCE  4 


VOA  -  Detonation  of  burstered  munitions  by  (1)  fire-only  accident, 
(2)  mechanical  force  and  fire,  (3)  truck  collision/overturn 
Impact -induced  rocket  propellant  Ignition,  or  (A)  truck 
collision/overturn  Induced  undue  force  detonation.  The 
release  frequency  is  calculated  by:  (BE31)  (BE62)  (BE63) 
(BE31A)  (BE52')  (BE62A)  (BE63)  +  (BE31A)  (BE60)  (BE61R)  + 
(BE31A)  (BE61).  The  third  term  is  for  rockets  only. 


Event 

No. 

Name 

Probability 

Ref erence/ Remarks 

BE31 

Truck  accident 

occurs 

1.7  X  10-7 
per  mile 

Table  9-1 

BE62 

Fire  generated 

0.17 

Table  9-1 

BE63 

Fire  has  heat 
and  duration  to 
detonate  burster 
(>15  min) 

10-6 

Trucks  limited  to  only  enough 
fuel  for  the  fire  to  last 

10  min. 

BE31A 

Truck  collision/ 
overturn  occurs 

l.A  X  10-7 
per  mile 

Table  9-1 

BE52' 

Mechanical  forces 
destroy  package 
insulation 

1  X  10-2 

Reference  8-6 

BE62A 

Fire  occurs, 
given  a  collision 
or  overturn 

0.07 

Reference  8-6 

BE60 

Impact  force 
generated 

1.0 

Reference  8-1 

BE61(R) 

Impact  force  suf¬ 
ficient  to  deto¬ 
nate  burster 

0.002 

Reference  8-5 

BE61 

Undue  force  deto¬ 
nation  occurs 

2.2  X  10-5 

Reference  8-6 

Puncture- induced  rocket  propellant  Ignition  has  not  been  included 
because  there  is  no  evidence  that  a  probe  exists  or  could  occur  at 
the  velocities  necessary  to  cause  puncture- induced  propellant  igni¬ 
tion.  A  30-callber  bullet  traveling  about  1500  mph  is  required. 


TABLE  8-7 

ONSITE  TRANSPORT  SEQUENCE  5 

V05  -  A  truck  accident  occurs  and  a  resulting  fire  falls  non- 
burstered  munitions.  The  agent  release  frequency  Is  the 
product  of  three  basic  events:  BESly  BE629  and  BETS,  added 
to  the  product  of  BE31At  BE52'«  BE62A»  and  BE7S* 


Event 


No. 

Name 

Probability 

Reference /Remarks 

BE31 

Truck  accident 

occurs 

1.7  X  10-7 
per  mile 

Table  9-1 

BE62 

Fire  occurs 

0.17 

Table  9-1 

BE75 

Thermal  force 
falls  agent  con¬ 
tainment 
(>15  min) 

0 

1 

0^ 

Trucks  are  limited  to  carrying 
only  enough  fuel  for  a  10-mln 

fire. 

BE31A 

Truck  collision/ 
overturn  occurs 

1.4  X  10-7 
per  mile 

Table  9-1 

BE52' 

Mechanical 
forces  destroy 
package  Insula¬ 
tion 

1 

0 

K 

Reference  8-6 

BE62A 

Fire,  given  a 
collision 

0.07 

Reference  8-6 

( 

f 

4 

< 

4 


r 

r 


/ 


TABLE  8-8 

ONSITE  TRANSPORT  SEQUENCE  6 


V06  -  An  aircraft  crashes  into  a  munitions  truck;  no  fire  results. 
In  aircraft  accidents,  the  SNL  data  indicate  that  the 
predominant  mechanical  force  employed  against  cargo  packages 
is  intact,  with  crush  and  puncture  having  negligible  effect. 
The  agent  release  frequency  is  the  product  of  three  impact 


basic  events:  BE31.  BE60,  and  BE71. 


Event 

No. 

Name 

Probability 

BE31 

Aircraft  crash 

APG 

1.3  X  10-^ 

ANAD 

1.1  X  10-9 

LBAO 

5  X  10-10 

NAAP 

9.1  X  10-10 

PBA 

2  X  10-9 

PUDA 

8.4  X  10-9 

TEAD 

2.8  X  10-10 

UMDA 

1.8  X  10-9 

BE60 

Iiiq>act  force 

0.55 

only  generated 
(no  fire) 


BE71  Inq>act  force  1 

fails  agent 
containment 


Reference/Remarks 


Nine  percent  of  all  crashes  are 
on  takeoff,  32Z  inflight,  and 
S8Z  on  landing.  Fifteen  per¬ 
cent  have  lnq>act  angles  greater 
than  10  deg  in  takeoff  crashes, 
70Z  in  midflight  crashes,  and 
13Z  in  landing  crashes 
(Refs.  8-6  and  8-7). 

Derived  from  data  in  Ref.  8-1; 
49Z  of  all  aircraft  crashes 
involve  lnq>act  with  or  without 
other  forces;  27Z  of  them  are 
impact  only;  0.27/0.49  >  0.55. 

Conservatively  assumes  that  at 
least  one  package  falls  every 
time.  Burstered  munitions  will 


detonate;  nonburstered  muni¬ 


tions  fail. 


TABLE  8-9 

ONSITE  TRANSPORT  SEQUENCE  7 


V07  -  An  aircraft  crashes  onto  a  munition  truck,  fire  occurs  but 
Intact  forces  fall  agent  containment.  The  agent  release 
frequency  Is  the  product  of  three  basic  events:  BE31, 
BE60/62,  and  BE71. 


Event 

No. 

Name 

Probability 

BE31 

Aircraft  crash 

APG 

1.3  X  10-7 

ANAD 

1.1  X  10-9 

LBAD 

5  X  10-10 

NAAP 

9.1  X  10-10 

PBA 

2  X  10-9 

PUDA 

8.4  X  10-9 

TEAD 

2.8  X  10-10 

UMDA 

1.8  X  10-9 

BE60/62 

Impact  and  fire 

0.45 

generated 

Reference /Remarks 


See  remarks,  sequence  6. 


0.22/0.49  -  0.45  (fire  and 
Impact/all  impact). 


BE71  Impact  force 
falls  agent 
containment 

detonate.  Nonburstered  muni¬ 
tions  release  agent  by  spill 
and  vapor. 


1  Conservatively  assumes  that  at 

least  one  package  fails  every 
time.  Burstered  munitions 


JVAfWT  WT JWl ^  JUUW JV»  WIJVTJW^^V*  V!  VI  JlAVlJUt  JU*  VT  WntniL^^X^TCmc^  H^TV^KTW 


to  cause  a  truck  collision  or  overturn.  Thus,  the  initiating  event  fre¬ 
quency  is  taken  to  that  for  a  0.5  g  earthquake  or  greater  (called  a 
"severe  earthquake")  at  the  specific  site. 

The  following  sequences  resulted  from  the  earthquake  event  tree 
analysis : 

V09  -  A  severe  earthquake  occurs,  causing  a  munitions  vehicle 

accident,  and  crash  forces  fail  the  agent  containment. 

VOlO  -  A  severe  earthquake  occurs,  causing  a  munitions  vehicle 
accident,  and  impact  forces  fail  the  agent  containment. 

VOll  -  A  severe  earthquake  occurs,  causing  a  munitions  vehicle 

accident,  and  puncture  forces  fail  the  agent  containment. 

V012  -  A  severe  earthquake  occurs,  causing  a  munitions  vehicle 
accident,  and  fire  detonates  burstered  munitions. 

V013  -  A  severe  earthquake  occurs,  causing  a  munitions  vehicle 
accident,  and  fire  fails  nonburstered  munitions. 

V015  -  An  earthquake  or  tornado  occurs,  generating  undue  mechanical 
forces  which  cause  detonation  of  burstered  munitions. 

Note  that  V015  has  a  dual  initiator,  either  a  severe  earthquake  or 
a  tornado  (analyzed  in  the  next  subsection).  Quantification  of  the 
earthquake  event  tree  analysis  is  shown  in  Tables  8-10  through  8-15. 

8. 1.3.4.  Tornado.  Figures  8-4  and  8-5  show  the  event  trees  for  a 
tornado  or  high  winds  causing  a  truck  collision  overturn  or  generating 
an  impacting  missile.  The  tornado  frequency  is  presented  in  Section  4.2 
for  the  specific  sites.  Quantification  of  the  event  trees  is  summarized 
in  Table  8-16. 

8-18 


TABLE  8-10 

ONSITE  TRANSPORT  SEQUENCE  9 


V.S< 


An  earthquake  occurs  In  which  the  munitions  are  subjected 
primarily  to  crush  forces  with  other  forces  being  negligible. 
The  agent  release  frequency  is  the  product  of  three  basic 
events:  BE31,  BE68,  and  BE73. 


Probability 


Ref erence/ Remarks 


Earthquake  occurs 
TEAD 
NAAP 

Elsewhere 


1  X  10-'^ 

2  X  10-5 

6  X  10"^ 


Table  4-6;  a  >0.5-g  earthquake 
is  assumed.  See  external 
events  section. 


Crush  force 
generated 


Reference  8-2 


Crush  force  fails  0.1 
agent  containment 


Same  as  sequence  1. 


m 


TABLE  8-11 

ONSITE  TRANSPORT  SEQUENCE  10 


VOlO  -  An  earthquake  occurs  In  which  the  munitions  are  subjected 

primarily  to  impact  forces  with  other  forces  being  negligi¬ 
ble.  The  accident  release  frequency  is  the  product  of  three 
basic  events:  BE31,  BE60,  and  BE71. 

Event 

No.  Name  Probability  Reference/Remarks 

BE31  Earthquake  occurs 

TEAD  1  X  10"^  Table  4-6;  assumes  >0.5-g 

NAAP  2  X  10“^  earthquake. 

Elsewhere  6  x  10"^ 

BE60  Impact  force  1.0  Reference  8-2 

generated 

BE71  Impact  force  £  Same  as  sequence  2. 

falls  agent 
containment 


TABLE  8-12 

ONSITE  TRANSPORT  SEQUENCE  11 


VO 11  -  An  earthquake  occurs  In  which  the  munitions  are  subjected 
primarily  to  puncture  forces  with  other  forces  being 
negligible.  The  agent  release  frequency  is  the  product  of 
three  basic  events:  BE31,  BE64,  and  BE67. 


Event 

No. 


Probability 


Reference/ Rema r ks 


Earthquake  occurs 
TEAD 
NAAP 

Elsewhere 


1  X  10-^ 

2  X  10-5 

6  X  10-5 


Table  4-6 


BE64  Puncture  environ-  0.0164 
ment  occurs 


Reference  8-2 


BE67  Probe  falls  agent  0.024 
containment 


Reference  8-2 
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V012  -  An  earthquake  occurs  and  accidental  forces  cause  detonation 
of  burstered  munitions.  This  scenario  Is  similar  to  sce¬ 
nario  VOA.  The  agent  release  frequency  Is  the  product  of 
three  basic  events:  BE31t  BE62,  and  BE63  added  to  the  prod¬ 
uct  of  BE31,  BE52' ,  BE62y  and  BE63.  The  product  of  three 
propellant-lgnltlon  events:  BE31»  BE60,  and  BE61R  Is  added 
to  the  result  for  rockets. 


Event 


No. 

Name 

Probability 

Reference /Remarks 

BE31 

Earthquake  occurs 
TEAD 

NAAP 

Elsewhere 

1  X  10-^ 

2  X  10-5 

6  X  10-5 

Table  A-6 

6E62 

Fire  generated 

0.07 

Reference  8-6 

BE63 

Fire  has  heat  and 
duration  to  deto¬ 
nate  burster 
(>15  min) 

10-5 

Trucks  are  limited  to  only 
enough  fuel  for  a  10-mln  fire. 

BE52' 

Mechanical  forces 
destroy  package 
insulation 

1  X  10-2 

Reference  8-6 

BE60 

Impact  force 
generated 

1.0 

Reference  8-2 

BE61(R) 

Impact  force  suf¬ 
ficient  to  deto¬ 
nate  burster  by 
prepellant  igni¬ 
tion  (rockets 
only) 

0.002 

Reference  8-5 

Puncture-Induced  rocket  propellant  ignition  has  not  been  included 
because  there  Is  no  evidence  that  a  probe  exists  or  could  occur  at 
velocities  necessary  to  cause  propellant  Ignition  (30-caliber  bullets 
traveling  about  1500  mph  are  required). 
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TABLE  S-14 

ONSITE  TRANSPORT  SEQUENCE  13 


Event 

No. 


An  earthquake  occurs  and  £ire  £alls  nonburstered  munitions. 
The  agent  release  £requency  is  the  product  o£  three  external 
£lre  basic  events:  BESl*  BE62y  and  BE7S  added  to  the  pro¬ 
duct  o£  BE31,  BE52',  BE62,  BE75. 


Probability 


Re£erence /Remarks 


m 


BE52' 


Earthquake  occurs 
TEAD 
NAAP 

Elsewhere 

Fire  generated 

Thermal  £orce 
£ails  agent  con¬ 
tainment 
(>15  min) 

Mechanical  forces 
destroy  package 
Insulation 


1  X  10-^ 

2  X  10-5 
6  X  10-5 


1  X  10' 


Table  A-6 


Reference  8-6 


Trucks  are  limited  to  only 
enough  fuel  for  a  10-mln  fire. 


Reference  8-6 


^7: 


III 


TABLE  8-15 

ONSITE  TRANSPORT  SEQUENCE  15 

V015  -  An  earthquake  or  tornado  occurs,  generating  undue  mechanical 
forces  which  cause  detonation  of  burstered  munitions  (C,  P, 


M,  R)  (BE31) 

(BE61) 

+  (BE31A)  (BE31A')  (BE61). 

Event 

No. 

Name 

Probability 

Reference /Remarks 

BE31 

Earthquake  occurs 

TEAD 

1  X 

10-^ 

See  Section  4.2. 

NAAP 

2  X 

10-5 

Elsewhere 

6  X 

10-5 

BE31A 

Tornado  occurs 

TEAD,  UMDA 

3.3 

X  10-7 

See  Section  4.2. 

PUDA,  APG 

5.6 

X  10-6 

Elsewhere 

1.0 

X  10-^ 

BE31A' 

Trucks  traveling 

1  X 

10-1 

Assumes  a  lOZ  probability  that 

In  bad  weather 

the  administrative  control  pro 
hlbltlng  travel  during  bad 
weather  Is  violated. 

BE61 

Undue  mechanical 
force  sufficient 
to  detonate 
burster  occurs 

2.2 

X 

o 

1 

Reference  8-6 

VOIAA 


TABLE  8-16 

ONSITE  TRANSPORT  SEQUENCE  14 

A  tornado  occurs,  either  generating  a  missile  or  causing 
truck  overturn.  This  scenario  Is  discussed  In  two  parts: 
14A  and  14B.  014A  Is  the  tornado-generated  missile  sce¬ 

nario  and  the  release  frequency  Is  the  product  of  events 
BE31,  BE31*,  BE64,  and  BE51.  14B  Is  the  mechanical  forces 

cause  agent  release  and  Is  the  result  of  the  calculation 
(BE31)  (BE31')  (BE68)  (BE53)  +  (BE31)  (BE3r)  (BE60) 

(BE52)  +  (BE31)  (BE3l')  (BE64A)  (BE51A). 

Tornado-generated  missile  causes  agent  containment  to  fall. 


Tornado  occurs 
(winds  >160  mph) 
TEAD,  UMDA 
PUDA,  APG 
Elsewhere 

Truck  traveling 
in  bad  weather 


Tornado- gene rated 
missile  capable 
of  puncturing  and 
falling  agent 
containment 
occurs  (winds 
>250  mph) 

TEAD,  UMDA 
PUDA,  APG 
Elsewhere 

Missile  falls 
agent  containment 


Probability 


3.3  X  10-7 
5.6  X  10-6 
1.0  X  10-^ 

1  X  10-1 


5.4  X  10"^ 
1.8  X  10-2 

1.4  X  10-2 

5.3  X  10-5 


Reference /Remarks 
Site  specific;  see  Section  4.2. 


Assumes  a  10%  chance  that  the 
administrative  control  pro¬ 
hibiting  travel  in  bad  weather 
will  be  violated. 

Fraction  of  winds  >160  mph  that 
are  also  >250  mph.  See  exter¬ 
nal  events  section  and  Appen¬ 
dix  C.  Conservative  for  heavy- 
walled  munitions. 


M 


Methodology  in  Appendix  C. 


i 

i: 


TABLE  8-16  (Continued) 

VOIAB  -  Tornado  causes  a  truck  collision/overturn,  generating 
mechanical  forces  that  fail  agent  containment. 


Event 


No. 

Name 

Probability 

Reference /Remarks 

BE31 

Tornado  occurs 
(winds  >160  mph) 
TEAD,  UMDA 

PUDA,  APG 
Elsewhere 

3.3  X  10-7 
5.6  X  10-® 
1.0  X  10-^ 

See  external  events  section. 

BE31' 

Truck  traveling 
in  bad  weather 

o 

X 

Assumes  a  10%  chance  that  the 
administrative  control  pro¬ 
hibiting  travel  during  bad 
weather  is  violated. 

BE68 

Crush  force 
generated 

1.0 

Reference  8-2 

BE60 

Impact  force 
generated 

1.0 

Reference  8-2 

BE64A 

Puncture 

environment 

0.0164 

Reference  8-2  occurs. 

BE53 

Crush  fails 
agent  contain¬ 
ment 

0.1 

Same  as  sequence  V09. 

BE52 

Impact  fails 
containment 
(>35  mph) 

e 

Maximum  postulated  velocity 
change  (30  mph)  does  not 
exceed  package  failure 
threshold  of  35  mph. 

BE51A 

Probe  fails 
agent  contain¬ 
ment  (0.75  in. 
mild  steel  wall 
equivalent 
thickness) 

0.024 

Reference  8-1 

(®)lt  is  assumed  that,  given  the  high  winds  present  during  a  tor¬ 
nado,  and  the  high  probability  of  accompanying  rain,  that  a  signifi¬ 
cant  fire  will  not  be  Initiated  by  the  tornado,  or  sustained  during 
the  tornado. 
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The  calculation  models  described  in  Section  10  were  used  to 
determine  the  agent  released  for  the  onsite  transportation  accident 
sequences.  The  agent  release  results  for  these  accident  sequences  are 
also  given  in  Section  10. 

8.1.5.  Analytical  Results 

The  results  of  the  probabilistic  analysis  of  the  accident  sequences 
(median  frequency  values)  are  shown  in  Table  8-17,  Including  the  results 
of  the  uncertainty  analysis  of  the  agent  release  sequence  frequency 
values.  The  range  factor  is  the  ratio  of  the  95th  percentile  value  to 
the  50th  percentile  value  of  a  log  normal  distribution.  The  accident 
frequencies  for  sequences  1  to  5  are  reported  per  truck  mile.  The  acci¬ 
dent  frequencies  for  sequences  6  to  15  are  reported  per  exposure  year. 

No  quantitative  screening  of  the  scenarios  was  done  at  this  point  in  the 
analysis  because  the  accidents  per  mile  need  to  be  multiplied  by  the 
number  of  miles  (a  classified  number)  prior  to  a  meaningful  screening 
analysis. 

The  number  of  munitions  truckloads  is  computed  from  the  classified 
stockpile  values  divided  by  the  number  of  munitions  per  truck  load  from 
Table  8-2.  The  accident  frequency  is  determined  by  first  multiplying 
the  values  in  Table  8-3  by  the  number  of  truckloads.  This  product  is 
multiplied  either  by  the  number  of  onsite  truck  miles  or  by  the  number 
of  onsite  truck  exposure  years.  It  is  assumed  that  the  trucks  move 
individually  to  and  from  the  railhead  at  an  effective  speed  of  10  mph. 
The  total  exposure  time  is  the  onsite  distance  divided  by  10  mph. 


The  final  results  of  the  accident  scenario  analysis  (per  munition 
inventory)  are  contained  in  a  classified  appendix  to  this  report. 
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8.2.  UNCERTAINTY  ANALYSIS 


The  results  of  the  uncertainty  analysis  Indicate  that  the  95th 
percentile  values  may  be  up  to  140  times  higher  than  the  reported  median 
values.  Table  8-18  presents  the  error  factors  used.  Where  sufficient 
statistical  data  exist  to  establish  the  95th  percentile  values,  they  are 
reflected  In  the  smaller  error  factors  assigned  to  these  events,  which 
usually  range  from  3  to  5.  Otherwise,  the  error  factors  were  based  on 
engineering  judgment.  The  guidelines  for  assigning  error  factors 
presented  In  Section  5  were  also  applied  here. 


TABLE  8-18 

ONSITE  TRANSPORTATION  DATA 
(Onsite  Package) 


Range 

Event  No.  Name  Probability  Factor 


BE31 

Truck  collision/overturn 

1.38 

X 

o 

1 

20 

BE68 

Crush  force  generated 

1.00 

— 

BE73 

Crush  force  agent  containment 
(crush  >50,000  lb) 

1.00 

X 

o 

1 

2 

BE60 

Impact  force  generated 

1.00 

— 

BE71 

Impact  force  falls  containment 

Negl 

— 

BE6A 

Probe  generated 

1.64 

X 

10-2 

3 

BE67 

Probe  fails  agent  containment 
(V/R  >100/s) 

2.4  : 

1C  ! 

10-2 

2 

BE62 

Fire  generated 

1.69 

X 

10-1 

2 

BE63 

Fire  has  heat  and  duration  to 
detonate  burster  (>15  min) 

1.00 

X 

10-6 

50 

BE31A 

Truck  collision/overturn. 

Same  as  BE31 

BE61  (R) 

Impact  force  sufficient  to 
detonate  rocket 

2.00 

X 

o 

1 

5 

BE52' 

Mechanical  forces  destroy  ONC 

1.00 

X 

10-2 

3 

BE62A 

Fire  occurs  given  truck 
collis ion/ over turn 

7.00 

X 

10-2 

2 

BE61 

Undue  force  sufficient  to 
detonate  burster 

2.20 

X 

10-5 

25 

BE75 

Thermal  force  fails  agent 
containment  (>15  min) 

1.00 

X 

10-6 

50 

BE31  (Aircraft) 

Aircraft  crash  occurs  at: 

APG 

1.30 

X 

10-7 

10 

ANAD 

1.10 

X 

10-9 

10 

LBAD 

5.00 

X 

10-10 

10 

NAAP 

9.10 

X 

10-9 

10 

PBA 

2.00 

X 

10-9 

10 

PUDA 

8.40 

X 

10-9 

10 

TEAD 

2.80 

X 

10-10 

10 

UMDA 

1.80 

X 

10-9 

10 

BE60 

Impact  for  only  (no  fire) 

5.50 

X 

10-1 

-- 

BE71 

Impact  force  fails  containment 

1.00 

-- 

BE60 

BE71 


TABLE  8-18  (Continued) 


Range 


Event  No. 

Name 

Probability 

Factor 

BE60/62 

Impact  and  fire  generated 

4.5  X  10-1 

— 

BE31  (EQ) 

Earthquake  occurs  (>0.5  g) : 

TEAD 

1.00  X  10-^ 

10 

NAAP 

2.00  X  10-5 

10 

Elsewhere 

6.00  X  10-5 

10 

BE68 

Crush  force  generated 

1.00 

— 

BE62  (EQ) 

Fire  generated  (Same  as  BE62A) 

BE31  (Tornado) 

Tornado  occurs  (winds 

>160  mph) : 

TEAD,  UMDA 

3.33  X  10-7 

10 

PUDA,  APG 

5.56  X  10-5 

10 

Elsewhere 

1.04  X  10-^ 

10 

BE31' 

Trucks  caught  In  bad  weather 

1.00  X  10-1 

2 

BE64 

Tornado-generated  missile 

capable  of  falling  containment 

(>250  mph) : 

TEAD,  UMDA 

5.40  X  10-3 

10 

PUDA,  APG 

1.80  X  10-2 

10 

Elsewhere 

1.40  X  10-2 

10 

BE51 

Missile  falls  containment 

5.30  X  10-5 

50 

BE64A 

Probe  generated 

1.64  X  10-2 

3 
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9.  QUANTIFICATIOH  BASES 


9.1.  DATA  BASE 

9.1.1.  Truck  Accident  Data 


The  truck  convoy  accident  data  summarized  here  was  developed  by  SNL 
(Ref.  9-1).  These  data  represent  the  most  comprehensive  Information 
currently  available  and  they  are  commonly  used  for  truck  transportation 
risk  analyses.  Therefore,  an  explanation  of  their  bases  will  not  be 
presented  here.  A  1987  report  by  the  Lawrence  Livermore  National  Labo¬ 
ratory  for  the  Nuclear  Regulatory  Commission  (Ref.  9-2),  describing 
highway  accidents  involving  spent  fuel  shipping  casks,  was  reviewed; 
the  more  recent  data  was  found  to  be  consistent  with  the  SNL  data 
(Ref.  9-1).  Therefore,  no  changes  will  be  made  in  the  data  used  for 
this  analysis.  The  SNL  analyses  considered  five  accident  forces: 
impact,  crush,  puncture,  fire,  and  immersion.  Only  the  first  four  are 
discussed  here  because  immersion  is  not  considered  a  threat  for  onsite 
transportation. 

The  effect  of  human  factors  on  the  truck  accident  rate  is  implicit 
in  the  SNL  data  base.  If  an  accident  occurred  due  to  human  error,  it 
shows  up  in  the  data  base  just  as  an  accident.  Therefore,  it  is  not 
possible  to  ascertain  the  human  error  contribution  or  to  define  the 
human  error  probabilities  involved.  No  specific  human  reliability  anal¬ 
ysis  was  done  for  onsite  transportation.  Several  administrative  con¬ 
trols  will  be  instituted,  however,  and  these  have  the  effect  of  reducing 
the  SNL  truck  accident  rate  as  shown  on  Table  9-1  and  discussed  in 
Section  8. 
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I.  «<l_  'Ak. 


TABLE  9-1 

TRUCK  ACCIDENT  RATE (a) 


Munitions  Vehicle  Highway  Accident  ( 

Accident  Type  Rate  (Per  Mile)  ] 


Head-on  collision  4.7  x  10”' 

Rear-end  collision  3.8  x  10“^ 

Rear-end  collision  4.0  x  10”^ 

Side-on  into  collision  1.5  x  10”^ 

Side-on  by  other  collision  2.3  x  10”^ 

Truck/train  collision  1.6  x  10”® 

Fixed  object  collision  4.3  x  10”^ 

Overturn  only  1.7  x  10”^ 

Subtotal  (collision/  2.47  x  10"^ 

overturn  events) 

Fire  only  2.8  x  10”® 

Total  2.5  X  10”6 


(^'Probability  (collision  or  overturn/truck  accident) 
1.38  X  10”7 


Convoy  Accident 
Rate  (Per  Mile) 


4.7  X 

10”7 

0 

3.8  X 

10”7 

00 

1 

o 

X 

00 

4.0  X 

10”7 

4.0  X  10”® 

1.5  X 

10”7 

0 

2.3  X 

10”7 

0 

1.6  X 

10”® 

0 

4.3  X 

10”7 

4.3  X  10”® 

1.7  X 

10-7 

1.7  X  10”® 

2.47  X 

:  10-6 

1.38  X  10”7 

2,8  X 

10”® 

2.8  X  10”® 

2.5  X 

10”6 

1.66  X  10”7 

1.66  X  10- 


=  0.831 


Probability  (fire  only/truck  accident)  = 


2,8  X  10”® 
1,66  X  10”7 


9.1.2.  Plant  Accident  Data 


Component  failure  data  that  support  all  of  the  fault  trees  and 
event  trees  are  presented  on  the  following  pages;  references  are  also 
provided.  The  data  used  to  quantify  the  fault  tree  events  arc  also  pre¬ 
sented  on  the  fault  trees.  Beta  factors  are  used  to  quantify  failure 
probabilities  for  identical  redundant  components.  The  beta  factors  are 
also  shown  on  the  fault  trees. 

The  derivation  of  the  failure  rates  used  in  this  study  was  based  on 
extensive  review  and  analysis  of  data  available  in  the  literature.  When 
a  sufficient  number  of  estimates  (at  least  10,  but  usually  many  more) 
was  available  for  a  component  failure  rate,  the  method  described  in 
"Reliability  Engineering"*  was  used  to  develop  a  nonparametric  distribu¬ 
tion  of  estimates.  The  0.5  percentile  of  this  distribution  was  used  as 
the  median  of  a  lognormal  distribution  of  parameter  estimates.  The 
0.95,  0.50,  and  0.05  percentiles  of  the  nonparametric  distribution  were 
used  to  develop  an  error  factor  for  the  lognormal  distribution. 

When  less  than  10  estimates  were  available  for  a  particular  compo¬ 
nent,  a  most  applicable  estimate  was  subjectively  selected  to  represent 
the  median  of  a  lognormal  distribution.  The  error  factor  was  also 
selected  subjectively,  but  it  was  verified  that  the  corresponding 
lognormal  distribution  was  consistent  with  the  other  available  esti¬ 
mates  . 

Fan  Fails  Off  -  0.13/yr  (EF  =  30) 

The  Corps  of  Engineers  (HND)  R/M  Data  Base  (Ref.  9-4)  provides 
failure  rates  for  fans  (all  failure  modes  combined)  ranging  from  0.9  to 
9.17  per  million  hours.  NPRD-3  (Ref.  9-5,  pages  201-202)  provides  a 


*ARINC  Research  Corporation,  "Reliability  Engineering,"  Prentice- 
Hall,  Inc.,  1964,  p.  144. 


range  from  2  to  25  failures  per  million  hours  for  fans  operating  under 
selected  environmental  conditions  (data  from  GF  and  NS  environmental 
codes  only).  Review  of  the  failure  mode  descriptions  in  the  NPRD-3 
report,  however,  reveals  that  no  more  than  about  51%  of  all  failure 
events  are  relevant  to  the  failure  mode  of  interest  here.  Thus,  the 
failure  rate  estimates  from  these  two  sources  range  from  about  0.5  to 
13  failures  per  million  hours. 

NPRDS  (Ref.  9-6,  pages  287-289)  reports  a  total  of  48  fan/blower 
failures  in  about  4.06  million  operating  hours.  The  failure  modes 
described  in  the  NPRDS  report  were  examined  to  screen  those  that  do  not 
apply  to  the  event  of  Interest.  This  review  indicates  that  only  23 
events  can  be  associated  with  the  failure  mode  of  Interest.  Thus,  the 
failure  rate  is  about  5.7  x  10"®/h. 

SRS  (Ref.  9-7,  item  code  663®)  provides  four  fan  failure  rate 
estimates  ranging  from  261  to  867  failures  per  million  operating  hours. 
These  estimates  were  reduced  by  50%  to  screen  failure  modes  that  do  not 
apply  to  this  event  (the  50%  reduction  is  based  on  both  the  NPRD-3  and 
NPRDS  failure  mode  reviews). 

All  these  sources  combined  provided  a  total  of  21  failure  rate 
estimates.  These  estimates  were  used  to  develop  a  distribution  of  fan 
failure  rates,  and  this  distribution  was  used  to  develop  conservative 
parameters  of  a  lognormal  distribution  to  be  used  in  this  study. 

The  median  and  error  factor  developed  from  this  distribution  are 
1.5  X  10“^/h  and  30,  respectively. 

Motor  Fails  to  Run  -  0.061/yr  (EF  =  20) 

The  Rijnmond  study  (Ref.  9-8,  Table  IX. I)  suggests  a  failure  rate 
range  from  0.5  to  100  (median  =  7,  EF  =  14)  failures  per  million  hours 
for  a  motor  falling  to  run. 
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NPRDS  (Ref.  9-6,  pages  A03-A09)  reports  a  total  of  A8  ac  motor 
failures  In  about  5.2  million  operating  hours.  The  failure  modes 
described  In  the  NPRDS  report  were  examined  to  screen  those  that  do  not 
apply  to  the  event  of  Interest,  and  only  about  IS  failures  were  judged 
applicable  here.  Thus,  the  NPRDS  estimate  Is  2.9  x  10~^/operatlng  hour. 

NPRD-3  (Ref.  9-5,  pages  199-201)  provides  a  range  from  0.5  to  250 
failures  per  million  operating  hours  under  selected  environmental 
conditions  (data  from  DOR,  GB,  GF,  and  NS  environmental  codes  only). 
Review  of  the  failure  mode  descriptions  In  the  NPRD-3  report,  however, 
reveals  that  no  more  than  about  77Z  of  all  failure  events  are  relevant 
to  the  failure  mode  of  Interest.  Thus,  the  failure  rate  range  from  this 
source  Is  from  O.A  to  193  failures  per  million  operating  hours. 

WASH-IAOO  (Ref.  9-9,  Table  III.A-2)  suggests  a  median  of 
10  X  10"®/h  with  an  error  factor  of  3.  SRS  (Ref.  9-7,  Item  code  56320) 
provides  ten  failure  rate  estimates  for  electric  motors  ranging  from  2.9 
to  158  failures  per  million  operating  hours.  These  estimates  were 
reduced  by  5AZ  to  screen  failure  modes  that  do  not  apply  to  this  event 
(the  5AZ  reduction  Is  an  average  of  the  reduction  suggested  by  the 
NPRD-3  and  NPRDS  failure  mode  reviews). 


All  these  sources  combined  provided  a  total  of  29  failure  rate 


estimates.  These  estimates  were  used  to  develop  a  distribution  of  motor 


failure  rates,  and  this  distribution  was  used  to  develop  conservative 
parameters  of  a  lognormal  distribution  to  be  used  In  this  study. 

The  median  and  error  factor  developed  from  this  distribution  are 
7  X  10"^/h  and  20,  respectively. 


Falls  to  Run  -  0.26/yr  (EF 


WASH-IAOO  reports  a  failure  rate  of  3  x  10"5/h  with  an  error  fac¬ 
tor  of  10.  This  estimate  Includes  both  the  pump  and  the  driver.  SRS 


(Ref.  9-7,  item  code  69530)  reports  a  slightly  higher  rate  (5. A  x 
10“^ /h)  that  is  in  good  agreement  given  the  large  uncertainty  assumed 
in  the  WASH-IAOO  estimate. 

NPRDS  (Ref.  9-6,  pages  421  through  429)  reports  a  total  of  509 
(<500  GFM)  pump  failures  in  about  2.3  million  operational  hours.  The 
failure  modes  described  in  the  NFROS  report  were  examined  to  screen 
those  that  do  not  apply  to  the  event  of  interest  (e.g.,  spurious 
operation) .  This  review  indicates  that  only  about  147  of  the  509  events 
can  be  associated  with  the  failure  mode  of  Interest.  Thus,  the  failure 
rate  is  about  6.4  x  10~^/operational  hour. 

NFRD-3  (Ref.  9-5,  page  215)  reports  a  failure  rate  of  7.9  x  10"^/ 
operating  hour  for  oil  pumps  operating  under  less  than  ideal  conditions, 
installed  in  permanent  racks  with  adequate  cooling  air,  and  maintained 
by  military  personnel.  However,  the  pun^  may  occasionally  be  subject  to 
shock  and  vibration.  As  for  the  NFROS  estimate,  the  failure  modes 
described  in  the  NFRD-3  report  were  reviewed,  and  only  about  27Z  of  the 
events  were  Judged  applicable  to  the  failure  mode  of  Interest.  Thus, 
the  failure  rate  becomes  about  2.1  x  10~^/operating  hour. 

All  estimates  are  in  good  agreement  with  the  WASH- 1400  estimate, 
and  the  latter  was  used  in  this  study.  The  error  factor  proposed  in  the 
WASH- 1400  is  also  adopted  here  because  both  the  NFROS  and  the  NPRD-3 
data  bases  show  large  variations  among  failure  rate  estimates  for 
different  pumps  and/or  for  similar  pumps  at  different  facilities. 

Heater  Fails  Off  -  0.021/yr  (EF  *  10) 

The  Corps  of  Engineers  (HND)  R/M  Data  Base  (Ref.  9-10,  page  296) 
provides  a  2.36/mllllon  hour  failure  rate  estimate  for  a  large  (30  kw, 
400  VAC),  two  stage  heater.  NFRD-3  (Ref.  9-5,  page  207)  provides  a 
range  from  0.4  to  3.5  failures  per  million  operating  hours  for  heaters 


operating  under  selected  environmental  conditions  (data  from  GB  environ¬ 
mental  code  only).  NPRDS  (Ref.  9-6,  page  322)  reports  18  heater  fail¬ 
ures  in  about  5  million  operating  hours.  Thus,  the  NPRDS  failure  rate 
estimate  is  about  3.6  x  10“^/h. 

The  estimate  from  the  Corps  of  Engineers  (HND)  data  base  (Ref.  9-4) 
is  Judged  more  applicable  here  and  will  be  used  as  the  median  for 
"heater  fails  off"  event.  An  error  factor  of  10  is  assumed  due  to  the 
large  uncertainties  associated  with  the  applicability  of  these  estimates 
to  the  equipment  of  interest.  Note  that  all  estimates  are  in  good 
agreement  given  the  large  uncertainty  assumed  for  this  failure  rate. 

Loss  of  (Plant  or  Instrument)  Air  System  -  0.016/yr  (EF  =  10) 

NPRDS  (Ref.  9-6,  page  49)  reports  no  air  system  failures  in  about 
398  thousand  operating  hours  (approximately  3.2  million  calendar  hours). 
These  statistics  were  compiled  from  24  Instrument  and  station  service 
air  systems  in  U.S.  nuclear  power  plants.  The  median  generated  from 
these  statistics  Is  about  1.8  x  10"^/operating  hour  (using  a  chi-square 
distribution) . 

There  are  large  uncertainties  regarding  the  similarity  of  the  sys¬ 
tems  at  this  facility  and  the  systems  in  the  NPRDS  data  base,  and  thus, 
regarding  the  applicability  of  the  NPRDS  estimate  to  this  facility.  An 
error  factor  of  10  is  Judged  adequate  here. 

Switch,  Generic--Spurlous  Operation  -  0.015/yr  (EF  =  19) 

A  review  of  available  data  bases  (Refs.  9-5  through  9-8  and 
Refs.  9-11  through  9-13)  revealed  53  failure  rate  estimates  for  a 
variety  of  switches  (e.g.,  pressure,  temperature,  etc.).  These  esti¬ 
mates  were  used  to  develop  a  distribution  of  switch  failure  rates,  and 
this  distribution  was  used  to  develop  conservative  parameters  of  a  log¬ 
normal  distribution  to  be  used  in  this  study. 


The  median  of  switch  failure  rate  estimates  Is  about  3.4  failures 
per  million  operating  hours.  This  rate  was  arbitrarily  reduced  by  50% 
to  represent  the  fraction  corresponding  to  the  failure  mode  of  Interest, 
l.e.,  "spurious  operation."  This  reduction  Is  believed  to  be  conserva¬ 
tive.  The  distribution  of  switch  failure  rates  suggests  an  error  factor 
of  19. 

Controller  (Includes  sensor,  signal  conditioning  equipment,  and  control 
circuitry).  Generic — Spurious  Operation  (high  or  low)  -  0.022/yr 
(EF  »  12) 

A  review  of  available  data  bases  (Refs.  9-5,  9-6,  9-8,  9-10,  9-12) 
revealed  19  failure  rate  estimates  for  a  variety  of  controllers  (e.g., 
pressure,  thermostat,  electronic,  etc.).  These  estimates  were  used  to 
develop  a  distribution  of  controller  failure  rates,  and  this 
distribution  was  used  to  develop  conservative  parameters  of  a  lognormal 
distribution  to  be  used  In  this  study. 

The  median  of  the  controller  failure  rate  estimates  Is  about  five 
failures  per  million  operating  hours.  This  rate  was  reduced  by  50%  to 
represent -the  fraction  corresponding  to  the  failure  mode  of  Interest, 
l.e.,  "spurious  operation"  (functions  without  signal).  This  reduction 
Is  suggested  In  the  IEEE  Std.  500-1977  data  base.  The  distribution  of 
controller  failure  rates  suggests  an  error  factor  of  12. 

Pressure  Controller  (Includes  sensor,  signal  conditioning  equipment,  and 
control  circuitry) --Spurious  Operation  (high  or  low)  -  0.007/yr 
(EF  -  12) 

A  review  of  available  data  bases  (Refs.  9-5,  9-6,  9-10,  9-12) 
revealed  seven  failure  rate  estimates  for  pressure  controllers.  These 
estimates  were  used  to  develop  a  distribution  of  pressure  controller 
failure  rates. 


The  median  of  the  pressure  controller  failure  rate  estimates  Is 
about  1.6  failures  per  million  operating  hours.  This  rate  was  reduced 
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by  50%  to  represent  the  fraction  corresponding  to  the  failure  mode  of 
interest,  i.e.,  “spurious  operation."  This  reduction  is  suggested  in 
the  IEEE  Std.  500-1977  data  base. 

The  error  factor  for  a  generic  controller,  EF  =  12,  is  adopted  here 
for  pressure  controllers  because  the  seven  estimates  available  for 
pressure  controller  failure  rates  are  judged  insufficient  to  represent 
the  spread  of  the  distribution. 

Pump  Falls  to  Start  -  5.1  x  10"^/demand  (EF  =  10) 

WASH-1400  suggests  a  10"^/demand  probability  of  a  pump  failing  to 
start,  with  an  error  factor  of  10.  This  same  estimate  has  been  adopted 
in  several  other  applications,  including  the  Rijnmond  study  (Ref.  9-8, 
Table  IX. I)  and  EGG-EA-5887  (Ref.  9-14,  page  12).  The  WASH-1400 
estimate  is  used  in  this  study. 

Also,  a  4.1  X  10"^/demand  probability  is  added  to  this  estimate  to 
account  for  cable,  circuit  breaker  (CB),  and  CB  control  circuit  faults 
(Ref.  9-15,  Table  B.5-5). 

Relief  Valve  Spuriously  Opens  -  0.01/yr  (EF  =  5) 

WASH-1400  suggests  a  10"^/h  (0.09/yr)  estimate  with  an  error  factor 
of  3.  A  more  recent  study,  EGG-EA-5887  (Ref.  9-39,  page  18),  proposes  a 
lower,  10“^/yr,  estimate  with  the  same  error  factor.  The  more  recent 
estimate  is  assumed  for  this  event,  but  the  error  factor  has  been 
Increased  to  5  to  reflect  uncertainties  with  respect  to  applicability  of 
nuclear-related  data  to  the  demilitarization  facility. 

Beta-Factor,  Generic  -  0.14  (EF  =  4) 

A  review  of  available  literature  and  data  bases  (Ref.  9-11  and 
Refs.  9-16  through  9-21)  on  CCFs  revealed  80  beta-factor  estimates  for 
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a  variety  of  equipment  (e.g.,  pumps,  diesel  generators,  Instrumentation 
and  control  equipment,  etc.).  These  estimates  were  used  to  develop  a 
distribution  of  beta-factor  values,  and  this  distribution  was  used  to 
develop  conservative  parameters  of  a  lognormal  distribution  to  be  used 
In  this  study.  The  median  of  the  beta-factor  estimates  Is  about  0.14 
with  an  error  factor  of  4. 

Solenoid  Valve  Beta-Factor  -  0.15  (EF  =  4) 

The  event  "Solenoid  Valve  Falls  to  Operate  on  Demand"  includes  a 
contribution  from  the  solenoid  valve  itself  and  a  contribution  from  the 
valve  relay. 

The  generic  beta-factor,  0.14,  was  used  for  the  solenoid  valve,  and 
the  breaker  beta-factor,  0.19  (Ref.  9-17),  was  used  for  the  valve  relay. 
The  overall  beta-factor  for  this  event  is  the  average  of  these  two  beta- 
factor  estimates,  weighted  by  their  contribution  to  the  event 
probability: 

0.14  X  10"3  +  0.19  X  10"^ 

- z - ; -  =  0.15 

10-3  +  10-4 

Damper  Beta-Factor  -  0.14  (EF  =  4) 

The  generic  beta-factor  was  assumed  applicable  for  dampers. 

Loss  of  Offsite  Power  -  0.09/yr  (EF  =  5) 

NUREG/CR-3992  (Ref.  9-22,  Table  5.1)  estimated  the  frequency  of 
loss  of  offsite  power  to  be  0.09/yr  based  on  industry-wide  U.S.  nuclear 
power  plant  data  for  the  years  1959  through  1983.  This  estimate  was 
derived  from  plants  with  at  least  two  offsite  power  connections  (this 


Includes  most  nuclear  power  generating  plants).  An  error  factor  of  5 
Is  subjectively  assigned  to  this  event. 


A  plant  specific  analysis  (Ref*  9-23)  of  a  digital  control  system 
indicated  a  1.6  x  10~^/h  frequency  of  spurious  system  operations  result¬ 
ing  in  a  spurious  signal  to  a  specific  component;  e.g.,  commanding  a 
valve  to  close,  given  appropriate  inputs  to  the  system.  (This  is  not 
the  total  frequency  of  spurious  system  operations.)  An  error  factor  of 
10  is  assigned  due  to  large  uncertainties  associated  with  the  applica¬ 
bility  of  this  estimate  to  the  control  system  at  the  demilitarization 
facility. 

Solenoid  Valve  Spuriously  Closes  -  0.0042/yr  (EF  =  10) 

NUREG/CR-2770  (Ref.  9-21,  page  92)  estimated  the  frequency  of 
motor-operated  valves  failing  to  remain  open  to  be  4.8  x  10“^/h.  Review 
of  the  descriptions  of  the  failure  occurrences  used  in  deriving  this 
estimate  shows  that  all  spurious  closings  of  valves  were  due  to  command 
faults  where  a  support  function  fault  resulted  in  a  spurious  signal  to 
close  the  valve  (e.g.,  bad  switch  caused  closing  contact  to  stick). 

Thus,  since  this  frequency  estimate  does  not  appear  to  depend  on  the 
type  of  driver,  it  is  judged  applicable  to  this  event. 


An  error  factor  of  10  is  assigned  due  to  large  uncertainties 
associated  with  the  applicability  of  nuclear-related  data  to  the 
demilitarization  facility. 


Check  Valve  Fails  to  Open  -  10"^/deinand  (EF  »  5) 


WASH-1400  provides  a  10“^  probability  of  a  check  valve  falling  to 
open  on  demand,  with  an  error  factor  of  3.  The  same  estimate  Is  pro-  . 
posed  In  EGG-EA-5887  (Ref.  9-14,  page  13).  NUREG/CR-2770  (Ref.  9-21, 
page  62)  provides  a  3.1  x  10~^/calendar  hour  estimate.  This  estimate  Is 
consistent  with  the  WASH-1400  estimate  If  the  valve  Is  tested  monthly. 

The  WASH- 1400  estimate  Is  assumed  for  this  event,  but  the  error 
factor  Is  Increased  to  5  to  reflect  uncertainties  associated  with  the 
applicability  of  nuclear-related  data  to  the  demilitarization  facility. 

Control  (Modulating)  Valve  Spuriously  Opens  or  Closes  -  0.0042/yr 
(EF  =  10) 

The  same  estimate  for  "Solenoid  Valve  Spuriously  Closes”  Is  used 
here.  The  large  uncertainty  range  (EF  =  10)  Is  considered  sufficient  to 
accommodate  equipment  variability. 

Note:  Spurious  signals  generated  by  the  control  system  are  not 
Included  In  this  estimate. 

Damper  Spuriously  Closes  -  0.0042/yr  (EF  =  10) 

The  same  estimate  for  "Solenoid  Valve  Spuriously  Closes"  Is  used 
here.  The  large  uncertainty  range  (EF  =  10)  Is  considered  sufficient  to 
accommodate  equipment  variability. 

Pressure  Controller  Diaphragm  Valve  Falls  (open  or  closed)  -  0.013/yr 
(EF  =  10) 

The  Corps  of  Engineers  (HND)  R/M  Data  Base  (Ref.  9-10,  pages  1037, 
1038)  provides  an  estimate  of  3  x  10~®/h  for  the  frequency  of  failure  of 
pressure  regulation  valves.  A  50Z  chance  of  falling  either  open  or 
closed  Is  assumed  here.  The  assumed  error  factor  Is  10. 


Level  Indicator — Spurious  Operation  -  0.06/yr  (EF  ■  4) 

A  review  of  available  data  bases  (Refs.  9-5  through  9-8,  and 
Ref.  9-12)  revealed  ten  failure  rate  estimates  for  level  switches,  level 
sensors,  and  level  transmitters.  These  estimates  were  used  to  develop  a 
distribution  of  level  Indicator  failure  rates,  and  this  distribution  was 
used  to  develop  conservative  parameters  of  a  lognormal  distribution  to 
be  used  In  this  study. 

The  median  of  level  Indicator  failure  rate  estimates  Is  about  0.12 
failures  per  operating  year.  This  rate  was  arbitrarily  reduced  by  50% 
to  represent  the  fraction  corresponding  to  the  failure  mode  of  Interest, 
l.e.,  “spurious  operation."  This  reduction  Is  believed  to  be  conserva¬ 
tive.  The  distribution  of  level  Indicator  failure  rates  suggests  an 
error  factor  of  4. 

Temperature  Detector — Spurious  Operation  -  0.095/yr  (EF  *  6) 

A  review  of  available  data  bases  (Refs.  9-5  through  9-8,  9-12, 
and  9-13)  revealed  seventeen  failure  rate  estimates  for  temperature 
switches,  temperature  Indicators,  and  temperature  transducers.  These 
estimates  were  used  to  develop  a  distribution  of  temperature  detector 
failure  rates,  and  this  distribution  was  used  to  develop  conservative 
parameters  of  a  lognormal  distribution  to  be  used  In  this  study. 


The  median  of  temperature  detector  failure  rate  estimates  Is  about 
0.19  failures  per  operating  year.  This  rate  was  arbitrarily  reduced 
by  50%  to  represent  the  fraction  corresponding  to  the  failure  mode  of 
Interest,  l.e.,  “spurious  operation";  this  reduction  Is  believed  to  be 
conservative.  The  distribution  of  temperature  detector  failure  rates 
suggests  an  error  factor  of  6. 


Solenoid  Valve  Falls  to  Operate  on  Demand  -  1.1  x  10“^/demand  (EF  *  5) 


The  IREP  data  base  (Ref.  9-24)  proposes  a  10"3/demand  probability 
for  this  event,  with  an  error  factor  of  3.  The  IREF  estimate  Is  adopted 
In  this  study,  but  the  error  factor  has  been  Increased  to  5  to  reflect 
the  uncertainty  associated  with  the  applicability  of  the  IREP  data  to 
the  demilitarization  plant  equipment.  Also,  a  10"^ /demand  probability 
Is  added  to  this  estimate  to  account  for  the  valve  relay  failure  to  open 
on  demand  (see  Relay/Breaker  Falls  to  Operate). 


Pressure  STiri.tch- -Spurious  Operation  -  0.037/yr  (EF 


A  review  of  available  data  bases  (Refs.  9-5  through  9-8,  9-11, 

9-13,  9-24,  and  9-25)  revealed  thirteen  failure  rate  estimates  for  a 
variety  of  pressure  sxd.tches.  These  estimates  were  used  to  develop  a 
distribution  of  pressure  switch  failure  rates,  and  this  distribution  was 
used  to  develop  conservative  parameters  of  a  lognormal  distribution  to 
be  used  In  this  study. 


The  median  of  pressure  switch  failure  rate  estimates  Is  about  0.074 
failures  per  operating  year.  This  rate  was  arbitrarily  reduced  by  50Z 
to  represent  the  fraction  corresponding  to  the  failure  mode  of  Interest, 
l.e.,  "spurious  operation";  this  reduction  Is  believed  to  be  conserva¬ 
tive.  The  distribution  of  pressure  switch  failure  rates  suggests  an 
error  factor  of  5. 


>er  Falls  to  Operate  on  Demand  -  1.1  x  10”^/demand  (EF 


The  same  probability  assumed  for  a  solenoid  valve  falling  to  oper¬ 
ate  on  demand  Is  used  here.  The  error  factor  has  been  Increased  to  10 
to  account  for  equipment  differences. 
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Relay/Breaker  Spuriously  Open  -  8.8  x  10“^/yr  (EF  =  10) 


The  IREP  data  base  (Ref.  9-24,  Table  5.1-1)  proposes  a  failure  rate 
of  10”®/h  for  loss  of  an  electrical  bus,  with  an  error  factor  of  10. 

The  loss  of  a  bus  event  Is  dominated  by  failure  of  the  supply  breaker; 
thus  the  IREP  estimate  is  used  here  for  a  relay/breaker  spuriously 
opening. 


Relay/Breaker  Falls  to  Operate  -  10“^/ demand  (EF  *  10) 

The  IREP  data  base  (Ref.  9-24,  Table  5.1-1)  proposes  a  10“^/demand 
probability  of  a  relay  falling  to  operate  on  demand,  with  an  error 
factor  of  10. 

Circuit  Breaker  Falls  to  Operate  -  lO'^/demand  (EF  *  10) 

The  IREP  data  base  (Ref.  9-24,  Table  5.1-1)  proposes  a  10"^ /demand 
probability  of  a  circuit  breaker  failing  to  operate  on  demand,  with  an 
error  factor  of  10. 

Solid  State  Relay  Falls  to  Operate  -  1.8  x  10"^/demand  (EF  =  5) 

MIL-HOBK-217D  (Ref.  9-25)  provides  a  failure  rate  estimate  of  0.5  x 
10~^/h  for  a  solid  state  (thyristor)  relay  (assuming  GF  conditions  In 
Table  5-2>10  and  a  quality  factor  of  5  In  Table  5-2-11).  This  estimate 
results,  with  an  assumed  monthly  test  scheme,  In  a  1.8  x  10~^  probabil¬ 
ity  of  failure  on  demand.  The  assumed  error  factor  for  this  event  Is  5. 

9.1.3.  Handling  Accident  Data 

All  Initiating  event  frequency  accidents,  except  for  forklift 
collisions,  were  derived  from  the  human  reliability  analysis  and  are 
discussed  In  Section  9.2. 


The  forklift  collision  accident  frequency  was  derived  from 
Ref.  9-1.  In  Ref.  9-1,  accidents  were  defined  to  Include  Incidents  that 
result  In  fatalities,  Injuries,  or  property  damage.  The  basic  truck 
accident  rate  Is  2.5  x  10~^  accidents /mile.  From  Table  II  of  Ref.  9-1, 
the  percent  of  accidents  leading  to  collisions  with  trucks,  autos,  and 
stationary  objects  and  overturns  Is  89.35Z.  Table  III  of  Ref.  9-1  also 
show  that  50Z  of  all  accidents  occur  at  30  to  40  mph. 

To  convert  the  basic  rate  to  accidents  per  operation,  the 
operator’s  exposure  time  In  the  highway  Is  determined.  If  the  operator 
was  traveling  at  35  iiq>h,  the  exposure  time  Is  1.7  min. 

In  order  to  apply  this  Information  to  forklift  collision  accidents, 
the  following  were  assumed: 

1.  The  total  operator  exposure  time  during  the  forklift  operation 
Is  10  min.  This  Includes  the  lifting  of  munitions  from  the 
stack,  moving  them  to  another  area,  and  unloading  them. 

2.  The  time  to  travel  from  one  point  to  another  Is  assumed  to  be 
one-third  of  the  total  time,  or  3.3  min. 

3.  Forklift  collisions  will  occur  at  speeds  no  greater  than 
40  mph  (l.e.,  two  forklifts  traveling  at  20  mph). 

Therefore,  forklift  collision  accident  rate  Is: 

3.3 

2.5  X  10"®  X  0.893  x  t — r  =  4.3  x  10"®/operatlon  . 

X  •  / 

This  median  value  Is  assigned  an  error  factor  of  10  on  the  basis  that 
the  data  Is  only  for  6  yr  and  there  may  be  other  unreported  Incidents 
more  directly  related  to  forklift  operations. 


Reference  9-1  also  Indicates  that  2SZ  of  fires  result  from 
collision-type  accidents.  It  Is  not  evident  from  the  data  If  fire 
from  collision  Is  directly  proportional  to  truck  speed.  Our  analysis 
assumes  that  It  Is.  Therefore,  we  modified  the  data  as  follows: 

Probability  of  fire  =  0.25  x  0.29  =  0.0725  , 

where  the  factor  0.29  represents  the  percent  of  collisions  occurring  at 
less  than  20  mph. 


f. 


9.2.  HUMAN  FACTORS  DATA 


9.2.1.  Human-Error  Probability  Estimation  -  Handling  Accidents 

Human-error  probabilities  were  quantified  for  use  In  the  handling 
scenarios  using  the  approach  to  human-error  estimation  described  In 
NUREG/CR-1278  (Ref.  9-26),  probabilities  of  human  errors  were  estimated 
based  on  several  performance-shaping  factors  such  as  munition 
configuration,  handling  operation,  clothing  level,  and  crew  size.  These 
factors  are  Identified  In  the  discussions  that  follow  on  the  derivations 
of  each  estimate.  Table  9-2  lists  the  error  probabilities  estimated  for 
puncturing  or  dropping  a  munition  based  on  each  of  these  factors.  These 
error  probabilities  will  be  Incorporated  into  the  handling  scenarios  as 
shown  in  the  data  tables  in  Table  9-3. 

1.  Puncturing  a  munition.  The  basis  for  the  error  estimates 

is  taken  from  Section  A. 4. 2  of  Ref.  9-27  (pages  4.4  through 
4.26).  This  reference  gives  4  x  lO"^  as  a  data-based  estimate 
of  the  probability  of  handling  errors  using  forklifts  for  the 
rocket  stockpile.  This  is  an  estimate  of  the  likelihood  of  an 
error  in  forklift  operation  that  potentially  could  lead  to  a 
warhead  rupture  while  attempting  to  isolate  a  leaking  rocket 
inside  the  storage  igloo. 

That  estimate  is  based  on  conditions  that  do  not  entirely 
represent  those  assumed  by  this  study;  namely,  that  a  three- 
man  crew  will  perform  all  forklift  operations.  In  this  study, 
it  is  assumed  that  a  two-man  crew  will  perform  all  forklift 
operatlons--one  driv^ing  the  forklift  and  one  guiding  forklift 
and  munition  position  from  the  ground.  This  means  that  the 
data-based  estimate  may  not  represent  the  probability  of 
forklift-handling  errors  expected  under  actual  conditions. 
Therefore,  this  estimate  was  revised  to  1  x  10“^  to  account 


HUMAN  ERROR  PROBABILITIES  PER  HANDLING  OPERATION 
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TABLE  9-3 

DATA  BASE  FOR  LEAKERS  IN  STORAGE 


Munition  develops  a  leak  during 
storage  (Scenario  SLl); 


4.2-in.  mortar 


105-mm  cartridge 


Ton  container 


Projectile 


Rocket 


Spray  tank 

Forklift  tine  accident  (SL2) 


Munition  punctured  given  tine 
accident : 


Bomb 

A. 2-in.  mortar 
105-nim  cartridge 
Mine 

Proj  ectile 


Frequency  or 
Probability 


Reference 


(TEAD) 

7.5E-5 

per 

yr 

(UMDA) 

A.5E-A 

per 

yr 

(AN/^) 

2.8E-7 

per 

yr 

(PUDA) 

l.OE-6 

per 

yr 

(TEAD) 

7.0E-6 

per 

yr 

(AN AD) 

2.8E-7 

per 

yr 

(PUDA) 

l.OE-6 

per 

yr 

(TEAD) 

7.0E-6 

per 

yr 

5.9E-6 

per 

yr 

(AN AD) 

9.0E-6 

per 

yr 

(PBA) 

l.lE-6 

per 

yr 

(TEAD) 

2.5E-A 

per 

yr 

(UMDA) 

3.1E-A 

per 

yr 

(AN AD) 

A.9E-6 

per 

yr 

(LBAD) 

9.3E-6 

per 

yr 

(PUDA) 

5.0E-6 

per 

yr 

(TEAD) 

8.1E-5 

per 

yr 

(UMDA) 

6.2E-5 

per 

yr 

(AN AD) 

6. lE-5 

per 

yr 

(LBAD) 

4.3E-5 

per 

yr 

(PBA) 

9.1E-7 

per 

yr 

(TEAD) 

1.3E-3 

per 

yr 

(UMDA) 

1.8E-4 

per 

yr 

9.8E-5 

per 

yr 

l.OE-4 

per 

oper . 

1.29E- 

2 

3.68E- 

2 

3.90E- 

3 

7.07E- 

2 

5.00E- 

2 

Ref.  5-20 


Ref.  5-17 


Ref.  5-2 


?»!•*?! 


c, 

■  *1 

i 


Rocket 
Spray  tank 


Event 


Frequency  or 
Probability 


Reference 


2.63E-1 

1.53E-2 


Munition  dropped  during  leaker 
isolation  (SL9): 

Pallet  and  bulk  (B,  S) 

Single  {C,D,M,P,Q,R) 

Ton  container  (K) 


Munition  punctured  given  drop: 

Bomb  (pallet) 

(single) 

4.2-ln.  mortar  (pallet) 
(single) 

105-mm  cartridge  (pallet) 
(single) 

Ton  container 
Mine  (pallet) 

(single) 

Projectile  (pallet  or  single) 

Munition  detonates  given  drop: 

Forklift  collision  leads 
to  drop  of  munitions 

Collision  results  in  fire 

Fire  contained: 

Burstered  (4  min) 


Nonburstered  (30  min) 


3.0E-4 

Human 

6.0E-4 

Reliability 

3.0E-5 

Analysis 
(Ref.  5-17) 

4.72E-4 

1.62E-4 

1.24E-4 

0.0 

2.71E-5 

0.0 

1.55E-3 

9.27E-5 

4.08E-5 

0.0 

Ref.  5-2 

1.6E- 8 /munition 

Ref.  5-2 

4.3E-6/opcr. 

Ref.  5-12 
and 

Ref.  5-2 

0.0725 

Ref.  5-12 

0.5 

Engineering 

judgement 

1.00 

Fuel  will  be 
limited  so  as 
limit  fire 
to  less  than 
10  min 

for  a  smaller  crew.  The  revised  estimate  of  1  x  10"^  is  the 
probability  that  one  or  both  members  of  a  two-man  crew  will 
err  such  that  the  forklift  tine  is  in  a  position  to  puncture  a 
munition.  (This  puncture  probability  applies  to  those  cases 
in  which  forklift  tines  are  used  to  lift  munitions;  it 
Includes  palletized  munitions  and  spray  tanks  in  overpacks.) 

Another  difference  is  that  the  original  estimate  from 
Ref.  9-27  (Ax  10~^)  was  based  on  operations  with  leaking 
rockets.  This  meant  that  it  assumes  that  the  crew  is  wearing 
Level  A  protective  clothing.  If  the  same  forklift  operations 
are  performed  in  less  strenuous  circumstances  (i.e.,  if  a 
lower  level  of  protective  clothing  is  worn),  the  error 
probability  estimate  can  be  lowered.  Here,  it  has  been 
lowered  to  5  x  10"^  for  the  case  of  the  operators’  wearing 
partial  protection  (masks,  gloves,  and  boots)  and  to  1  x  lO"^ 
for  the  case  of  their  wearing  minimal  protection  (street 
clothes,  with  masks  slung). 

Dropping  a  munition.  For  palletized  munitions  and  spray  tanks 
in  their  overpacks,  human-caused  drops  from  forklifts  are 
Judged  to  be  three  times  as  likely  as  punctures  caused  by 
operating  the  same  kind  of  forklift.  The  error-probability 
estimates  are  3  x  10”^,  1.5  x  10“^,  and  3  x  10”^  for  dropping 
a  munition  from  a  forklift  tine  when  wearing  Level  A,  Level  C, 
or  Level  F  protective  clothing,  respectively. 

Because  of  unwieldy  pallet  and  overpacked  spray  tank  loads, 
and  because  it  is  assumed  that  forkllft-tlne  loads  are  likely 
to  be  carried  at  higher  speeds  than  are  forklift-beam  loads, 
the  likelihood  of  a  ton  container  or  other  beam-carried  loads 
being  dropped  because  of  human  error  is  judged  to  be  an  order 
of  magnitude  lower  than  that  of  a  tine-carried  load  being 


dropped.  These  are  estimated  to  be  3  x  10”^,  1.5  x  10"^,  and 
3  X  10“^  for  protective  clothing  Levels  A,  C,  and  F, 
respectively. 


For  hand-carried  munitions,  munition  drops  are  estimated  to  be 
twice  as  likely  as  drops  of  tlne-carrled  load  from  forklifts. 
The  estimated  probabilities  of  dropping  a  hand-carried  muni¬ 
tion  when  wearing  Levels  A,  C,  and  F  protective  clothing  are 
6  X  10"^,  3  X  10“^,  and  6  x  10“^,  respectively.  (Loads  car¬ 
ried  by  forklift  beams  are  never  hand  carried.) 

These  probability  estimates  are  the  likelihood  of  an  error  per 
handling  operation.  A  single  forklift  operation  may  Involve  a 
single  munition  such  as  a  spray  tank  or  as  many  as  48  weapons 
on  a  pallet,  while  a  single  hand-carry  operation  will  always 
Involve  only  a  single  munition. 

Falling  to  detect  a  leaking  munition  In  a  package.  The  proba¬ 
bility  of  an  operator’s  falling  to  detect  a  leak  Is  based  on 
his  falling  to  monitor  a  package  before  opening  It.  The  error 
probability  is  estimated  as  I  x  10“^  based  on  item  9  from 
Table  20  through  22  of  NUREG/CR-1278  (Ref.  9-26).  This  human- 
error  probability  Is  the  probability  that  a  checker  will  fall 
to  check  equipment  status  when  that  status  affects  the 
checker’s  own  safety.  Since  the  containers  are  loaded 
elsewhere  (or  at  least  by  other  operators),  the  unloader 
should  be  cautious  when  handling  them;  he  has  no  way  to  ensure 
a  "clean"  vault  Interior,  so  he  will  probably  want  to  protect 
himself.  This  error  estimates  that  the  operator  Is  likely  to 
overlook  this  check  on  one  out  of  every  thousand  vaults  or 
transportation  containers  that  he  opens. 
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9.2.2.  Human-Reliability  Analysis  for  Plant  Operations 

The  human-reliability  analysis  (HRA)  for  plant  operations  was 
conducted  as  an  Input  to  the  plant  operations  Internal  events  analysis. 
This  section  describes  the  scope  of  the  HRA,  the  methodology  used,  the 
screening  performed,  and  the  final  quantification. 

9.2.2. 1.  Scope.  The  preliminary  fault-tree  and  event-tree  models  for 
plant  operations  were  examined  to  Identify  human  actions  that  had  the 
potential  to  mitigate  agent  release.  For  screening,  these  human  actions 
were  categorized  and  assigned  conservative  human-error  probabilities. 
Once  the  plant  operations  scenarios  had  been  screened  on  the  basis  of 
frequency  and  consequence,  the  survivors  were  examined  In  greater  detail 
to  Identify  Important  human  actions  and  to  Identify  plant/operating  sys¬ 
tem  characteristics  that  could  Influence  human-error  probabilities.  The 
Important  human  actions  were  quantified,  taking  this  Information  Into 
account,  and  were  Integrated  Into  the  final  fault-tree  and  event- tree 
models. 

9. 2. 2. 2.  Methodology.  Screening  and  final  estimates  of  human-error 
probabilities  were  obtained  by  using  the  Technique  for  Human  Reliability 
Analysis  (THERP)  as  described  In  NUREG/CR~1278  (Ref.  9-26).  This  tech¬ 
nique  calls  for  Identifying  Individual  human  errors  and  for  describing 
the  set  of  performance-shaping  factors  (PSFs)  that  pertain  to  each  task 
situation.  Usually,  such  descriptions  are  very  task-,  site-,  and 
situation-specific.  In  this  case,  since  there  was  no  finished,  approved 
human-performance  system  to  analyze,  more  generic  descriptions  of  task 
situations  were  used.  That  Is,  several  assumptions  about  what  could  be 
realistically  expected  for  a  generic  CONUS  site  were  made,  since  there 
are,  as  yet,  no  written  procedures  for  CONUS,  no  site-specific  man- 
machine  Interface,  no  training  program  beyond  the  conceptual  stage,  and 
no  finished  plant  design  (except  that  for  JACADS)  that  allows  for  time 
data  to  be  collected.  The  human-reliability  analysis  for  plant  opera¬ 
tions  was  based  on  these  assumptions,  which  arc  listed  In  Appendix  E. 


9-2A 


9. 2. 2. 3.  Screening.  To  screen  the  plant-operations  scenarios,  generic 
human-error  events  were  defined.  The  plant-operations  logic  models 
(fault  trees  and  event  trees)  were  examined  to  identify  appropriate 
areas  for  considering  the  human-error  contribution  to  release  frequen¬ 
cies.  At  appropriate  places  on  these  logic  models,  one  or  more  of  the 
generic  human-error  events  were  placed,  or  it  was  determined  that  the 
human-error  contribution  had  already  been  taken  into  account  there 
implicitly. 

Conservative  human-error  probabilities  were  estimated  for  each  of 
the  error  events.  The  conservative  estimates  may  be  considered  to  rep¬ 
resent  the  upper  bound  of  a  worst-case  human-action  situation.  The 
screening  human-error  events  are  described  in  Table  9-A  along  with  the 
data  source  for  each  error  probability.  In  general,  the  HEPs  used  for 
screening  purposes  are  either  (1)  factors  of  3  to  10  higher  than  the 
upper  bounds  reported  in  Ref.  9-26,  (2)  taken  to  be  1.0,  or  (3)  conser¬ 
vative  values  are  assumed  based  on  analyst  experience  and  scientific 
judgment.  Once  these  conservative  values  had  been  used  in  the  quantita¬ 
tive  scenario  screening,  more  realistic  human-error  probabilities  were 
estimated  for  the  surviving  scenarios. 

9. 2. 2. A.  Final  Quantification.  A  preliminary  draft  of  the  event  trees 
was  examined  to  identify  any  human  actions  that  might  serve  as  initia¬ 
tors  to,  or  mitlgators  of,  accident  scenarios.  Those  human  actions  were 
categorized  according  to  the  system  or  equipment  interface  dealt  with  by 
the  operators.  (As  is  usual  with  other  risk  assessments,  human  errors 
in  maintenance  activities  were  not  quantified  explicitly  since  those 
errors  contribute  to  the  already-estimated  hardware- failure  probabili¬ 
ties.)  Table  9-5  lists  those  human  actions  in  scenario-identifier 
order. 

For  final  quantification,  this  list  was  grouped  according  to  error 
types.  Ten  error  types  were  identified  that  focus  on:  ignition,  fire 
suppression,  conveyor  loading,  munition  counting,  tank  overfill,  sump 


TABLE  9-4 

SCREENING  QUANTIFICATION  FOR  HUMAN-RELIABILITY 
ANALYSIS  OF  PLANT  OPERATIONS 


Index 


Error  Event 


Source(^) 


Operator  falls  to  respond  to  an  alarm 
indication.  Correct  response  is  in  the 
control  room  and  may  Include  taking 
simple  control  action  or  initiating 
emergency  shutdown. 

Operator  fails  to  respond  to  an  alarm 
indication.  Correct  response  is  outside 
the  control  room,  and  Decontamination 
Protective  Ensemble  (DPE)  may  be 
required. 

Operator  falls  to  notice  a  malfunction 
or  existing  condition  on  the  closed- 
circuit  TV  screen.  He  fails  to  shut  the 
operation  down  as  a  result. 


Operator  fails  to  monitor  the  operating 
system.  He  falls  to  carry  out  a  required 
action  such  as  closing  a  valve  or  closing 
a  blast  door. 

Operator  shuts  down,  disables,  or  delays 
the  operation  of  a  safety  system.  This 
could  be  because  he  misinterprets  system 
status  or  because  the  Information  he 
received  is  Incorrect  or  incomplete. 

Operator  takes  action  that  initiates  a 
fire  or  some  other  sequence  of 
catastrophic  events. 

Operator  falls  to  take  action  to  miti¬ 
gate  fire.  He  fails  to  close  the 
dampers . 


1  X  10' 


3  X  10-^ 


5  X  10- 


Table  20-23, 
item  2b 
(factor  of  10 
higher  than 
upper  bound) 

(Factor  of  3 
above  Index  1) 


Table  20-10, 
item  7  (upper 
bound  (or 
Table  20-22, 
item  4  (factor 
of  10  above 
upper  bound) 

Table  20-6, 
item  2  (factor 
of  10  above 
upper  bound) 

Table  20-3, 
item  2  (by  10 
minutes  after 
signal) 


1  X  10”^  Scientific 
j  udgment 


Table  20-3, 
item  2  (by  10 
minutes,  upper 
bound ) 


3  X  10- 


1  X  10- 


Operator  falls  to  Implement  action  to 
recover  from  upset  condition. 


1.0 


Scientific 

judgment 


TABLE  9-4  (Continued) 


Index 


Error  Event 


HEP 


Source ( 


9  Maintainer  fails  to  perforin  tasks,  to  3  x  10 

perform  them  correctly,  or  to  perform 
them  on  time. 

10  Operator  fails  to  carry  out  administra-  5  x  10 

tive  control  policy.  He  fails  to 
initiate  a  regularly  scheduled  action 
or  falls  to  follow  standard  operating 
procedure. 

11  Operator  selects  wrong  component  to  5  x  10 

operate. 


-1 


-1 


-2 


i 


12  Operator  drops  or  damages  munition  while  3  x  10" 
controlling  it  manually,  lifting  or 
carrying  it  with  a  forklift,  or  carrying 
it  by  hand. 

(®)Unlcss  stated  otherwise,  all  tables  and  item  numbers  refer  to 
NUREG/CR-1278  (Ref.  9-26). 


Table  20-6, 
item  7 


Table  20-6, 
item  1  (factor 
of  10  above 
upper  bound) 


Table  20-12, 
item  2  (factor 
of  5  above 
upper  bound) 

Scientific 
j  udgment 
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TABLE  9-5 

HUMAN-ERROR  EVENTS  BY  SEQUENCE 


No. 

Error  Events 

Area 

Mun 1 1 1  on 

Seg 

1 

Conveyor  Loading 

ECV 

Ton  Container 

ECV-1 

2 

Ignition 

ECV 

Ton  Container 

ECV-1 

3 

Fire  Suppression 

ECV 

Ton  Container 

ECV-1 

4 

Ventilation  System 

ECV 

Ton  Container 

ECV-1 

5 

Conveyor  Loading 

ECV 

Ton  Container 

ECV-2 

6 

Ignition 

ECV 

Ton  Container 

ECV-2 

7 

Fire  Suppression 

ECV 

Ton  Container 

ECV-2 

8 

Conveyor  Load  1 ng 

ECV 

M55  Rocket 

ECV- 3 

9 

Conveyor  Load  1 ng 

ECV 

M55  Rocket 

ECV-4 

10 

Fire  Suppression 

ECV 

MSS  Rocket 

ECV-4 

1  1 

Conveyor  Loading 

ECV 

MSS  Rocket 

ECV- 5 

12 

Fire  Suppression 

ECV 

MSS  Rocket 

ECV-5 

13 

Conveyor  Loading 

ECV 

Ml  ne 

ECV-6 

1-4 

Conveyor  Loading 

ECV 

Ml  ne 

ECV-7 

IS 

Fire  Suppression 

ECV 

Mine 

ECV-7 

16 

Conveyor  Load  1 ng 

ECV 

Ml  ne 

ECV-8 

17 

Fire  Suppression 

ECV 

Ml  ne 

ECV-8 

18 

Conveyor  Loading 

ECV 

8*  Project  1  1 e 

ECV-9 

19 

Conveyor  Load  1 ng 

ECV 

8  *  Pro ject 1 1 e 

ECV- 10 

20 

Fire  Suqpresslon 

ECV 

8 *  Project  1 1 e 

ECV- 10 

21 

Conveyor  Loading 

ECV 

8*  Project  1 1 e 

ECV-  1  1 

22 

Fire  Suppression 

ECV 

8*  Project  1  1 e 

ECV-  1  1 

23 

Conveyor  Loading 

ECV 

105-nim  Projectile 

ECV- 12 

24 

Conveyor  Loading 

ECV 

lOS-mm  Project  1 

1  e 

ECV- 13 

25 

Fire  Suppression 

ECV 

lOS-irm  Project  1 

1  e 

ECV- 13 

26 

Conveyor  Loading 

ECV 

105-»rm  Project  1 

1  e 

ECV- 14 

27 

Fire  Suppression 

ECV 

105-cm  Project  1 

1  e 

ECV- 14 

28 

Conveyor  Loading 

ECV 

105-mm  Project  1 

t  e 

ECV- 15 

29 

Conveyor  Loading 

ECV 

lOS-mm  Project  1 

1  e 

ECV- 16 

30 

Fire  Suppression 

ECV 

lOS-mm  Project! 

t  e 

ECV- IS 

31 

Conveyor  Loading 

ECV 

lOS-mm  Project! 

1  e 

ECV- 17 

32 

Fire  Suppression 

ECV 

105-mm  Project! 

1  m 

ECV- 17 

33 

Undralned  Munition 

ECR 

Mine 

ECR- 1  DM 

34 

Ventilation  System 

ECR 

M 1  ne 

ECR- 1  DM 

35 

Undralned  Munition 

ECR 

M 1  ne 

ECR-2DM 

36 

Ventilation  System 

ECR 

M 1  ne 

ECR-2DM 

37 

Undralned  Munition 

ECR 

M 1  ne 

ECR-3DM 

38 

Ignition 

ECR 

M 1  ne 

ECR-3DM 

39 

Fire  Suppression 

ECR 

Mine 

ECR-3DM 

40 

Ventilation  System 

ECR 

Mine 

ECR-3DM 

41 

Undralned  Munition 

ECR 

Ml  ne 

ECR-4DM 

42 

Fire  Suppression 

ECR 

Ml  ne 

ECR-4DM 

43 

Ventilation  System 

ECR 

M 1  ne 

ECR-4DM 

44 

Undralned  Munition 

ECR 

Pro  Ject !  ! e 

ECR- 1DP 

45 

Ventilation  System 

ECR 

Pro  Ject 1 ! e 

ECR- 1DP 

46 

Undralned  Munition 

ECR 

Project  1  1 e 

ECR-2DP 

47 

Ventilation  System 

ECR 

Pro  Ject I  1 e 

ECR-2DP 

48 

Undralned  Munition 

ECR 

Project ! 1 e 

ECR-3DP 

49 

Fire  Suppression 

ECR 

Pro  Ject 1  1 e 

ECR-3DP 

50 

Ventilation  System 

ECR 

Project  1 1 e 

ECR-3DP 

51 

Undralned  Munition 

ECR 

Project  1 1 e 

ECR-4DP 

52 

Fire  Suppression 

ECR 

Project  1 1 e 

ECR-4DP 

M  mn  MiurMini  ITV»WKV  innfvitLTruv'.Trtniwuwuw  twfji  Tonw'Jf^SKy»TPrwuwtvwuvnvrv^  \~T7J7y7^Trrri>r^.’--  v  •vv•^nrtVT^^w^^Klr*.rwvrr^J^ 
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No . 

Error  Events 

Area 

Mun 1 1 1  on 

Seqi 

53 

Ventilation  System 

ECR 

Project  1 le 

ECR-4DP 

S4 

Undra 1 ned  Mun 1 1 1  on 

ECR 

Rocket 

ECR- 1 OR 

55 

Ventilation  System 

ECR 

Rocket 

ECR-1DR 

56 

Undra 1 ned  Munition 

ECR 

Rocket 

ECR-2DR 

57 

Fire  Suppression 

ECR 

Rocket 

ECR-2DR 

58 

Ventilation  System 

ECR 

Rocket 

ECR-2DR 

59 

Undra 1 ned  Munition 

ECR 

Rocket 

ECR-3DR 

60 

Fire  Suppression 

ECR 

Rocket 

ECR-3DR 

61 

Ven  1 1  I  a  1 1  on  Sys  tern 

ECR 

Rocket 

ECR-3DR 

62 

Undra 1 ned  Munition 

ECR 

Rocket 

ECR-40R 

63 

Fire  Suppression 

ECR 

Rocket 

ECR-4DR 

64 

Undra 1 ned  Mun 1 1 1  on 

ECR 

Rocket 

ECR-5DR 

65 

Vent  1 1  at  1  on  System 

ECR 

Rocket 

ECR-5DR 

66 

Undra 1 ned  Munition 

ECR 

Rocket 

ECR-60R 

67 

Fire  Suppression 

ECR 

Rocket 

ECR -6 DR 

68 

Vent  1 1  at  1  on  System 

ECR 

Rocket 

ECR-6DR 

69 

Undra 1 ned  Munition 

ECR 

Rocket 

ECR-7DR 

70 

Fire  Suppression 

ECR 

Rocket 

ECR -TOR 

71 

Ventilation  System 

ECR 

Rocket 

ECR-7DR 

72 

Spurious  Drain 

MPB 

Bulk  Container 

MPB-2B 

73 

Ignition 

MPB 

Bulk  Container 

MPB-2B 

74 

Fire  Suppression 

MPB 

Bulk  Container 

MPB-2B 

75 

Ventilation  System 

MPB 

Bulk  Container 

MPB-2B 

78 

Spurious  Drain 

MPB 

Bulk  Container 

MPB-3B 

77 

Ignition 

MPB 

Bulk  Container 

MPB-3S 

78 

Fire  Suppression 

MPB 

Bulk  Container 

MPB-3B 

79 

Ventilation  System 

MPB 

Bulk  Container 

MPB-3B 

80 

Spurious  Drain 

MPB 

Bulk  Container 

MPB-4B 

81 

Fire  Suppression 

MPB 

Bulk  Container 

MPB-4B 

82 

Spurious  Drain 

MPB 

Bulk  Containers 

MPB-5B 

83 

Fire  Suppression 

MPB 

Bulk  Containers 

MPB-5B 

84 

Ventilation  System 

MPB 

Bulk  Containers 

MPB-5B 

85 

Spurious  Drain 

MPB 

Bulk  Containers 

MPB-6B 

86 

Fire  Suppression 

MPB 

Bulk  Containers 

MPB-6B 

87 

Undra 1 ned  Munition 

MPB 

Pro  ject 1 1 e 

MPB-1DP 

88 

Ventilation  System 

MPB 

Pro  Ject 1  la 

MPB-1DP 

89 

Undra 1 ned  Munition 

MPB 

Project  1  1 e 

MPB-2DP 

90 

Fire  Suppression 

MPB 

Pro  Ject 1  1 e 

MPB-20P 

91 

Ventilation  System 

MPB 

Project  1  1 e 

MPB-2DP 

92 

Undrained  Munition 

MPB 

Pro  Ject 1  1  a 

MPB-3DP 

93 

Fire  Suppression 

MPB 

Project  1  1 e 

MPB-3DP 

94 

Ventilation  System 

MPB 

Project  1  1 e 

MPB-3DP 

95 

Conveyor  Loading 

BSA 

Ton  Container 

BSA-1 

96 

Ignition 

BSA 

Ton  Container 

BSA-  1 

97 

Fire  Suppression 

BSA 

Ton  Container 

BSA-1 

98 

Undrained  Munition 

BSA 

Ton  Container 

BSA-2 

99 

Conveyor  Loading 

BSA 

Ton  Container 

BSA-2 

100 

Ignition 

BSA 

Ton  Container 

BSA-2 

101 

Fire  Suppression 

BSA 

Ton  Container 

BSA-2 

102 

Ventilation  System 

BSA 

Ton  Container 

BSA-2 

103 

Sump  Pump  Operation 

TOX 

Agent  Tank 

TOX-2 

104 

Fire  Suppression 

TOX 

Agent  Tank 

TOX-2 

TABLE  9-5  (Continued) 


No. 

Error  Events 

Area 

Mun 1 1 1  on 

Sequence 

105 

Ventilation  System 

TOX 

Agent 

Tank 

TOX-2 

106 

Sump  Pump  Operation 

TOX 

Agent 

Tank 

TOX-3 

107 

Fire  Suppression 

TOX 

Agent 

Tank 

TOX-3 

108 

ventilation  System 

TOX 

Agent 

Tank 

TOX-3 

109 

Fire  Suppression 

TOX 

Agent 

Tank 

TOX-4 

1  10 

Sump  Pump  Operation 

TOX 

Agent 

Tank 

TOX-5 

1 1 1 

Fire  Suppression 

TOX 

Agent 

Tank 

TOX-5 

112 

Ventilation  System 

TOX 

Agent 

Tank 

TOX-5 

1 13 

Sump  Pump  Operation 

TOX 

Agent 

Tank 

TOX-6 

1 14 

Fire  Suppression 

TOX 

Agent 

Tank 

TOX-6 

1  15 

Tank  Overf 1 1 1 

TOX 

Agent 

Tank 

TOX-8 

1 16 

Fire  Suppression 

TOX 

Agent 

Tank 

TOX-8 

1 17 

Ventilation  System 

TOX 

Agent 

Tank 

TOX-8 

118 

Tank  Overf 1 1 1 

TOX 

Agent 

Tank 

TOX-9 

1 19 

Fire  Suppression 

TOX 

Agent 

Tank 

TOX-9 

120 

Shutdown  Signal 

Lie 

A 1 1  Mun 1 1 1 ons 

L 1 1 -00 1 

121 

Stop  Fuel 

Lie 

A 1  1  Mun 1 1 1 ons 

LI  2-001 

122 

Stop  Combustion 

Lie 

A 1  I  Mun 1 1 1 ons 

LI  2-002 

123 

Stop  Fuel 

Lie 

A 1 1  Mun 1 1 1 ons 

LI  2-005 

124 

Shutdown  Signal 

MPF 

Bulk. 

Project  1  1 es 

MP 1-001  , 

MP2-005 

125 

Shutdown  Signal 

MPF 

Bulk. 

Project  1  1 es 

MP2-001 , 

MP2-003 

126 

Stop  Fuel 

MPF 

Bulk, 

Project  1 1 es 

MP2-002 

127 

Shutdown  Signal 

MPF 

Bulk. 

ProjoctI les 

MP2-004 

128 

Undralned  Munition 

MPF 

Bulk. 

Project  1  1 es 

MP3-001 

129 

Shutdown  Signal 

MPF 

Bulk. 

Project  1  1 es 

MP3-001 

130 

Undralned  Munition 

MPF 

Bulk. 

Project  1  1  os 

MP3-002 

131 

Undralned  Munition 

MPF 

Bulk. 

Project  1  1  os 

MP3 -003 

132 

Undralned  Munition 

MPF 

Bulk. 

Project  I  1 es 

MP3-004 

133 

Undralned  Munition 

MPF 

Bulk. 

Pro  ject 1  1  os 

MP4-001 

134 

Shutdown  Signal 

MPF 

Bulk, 

Project  1  1  os 

MP4-001 

135 

Shutdown  Signal 

MPF 

Bulk. 

Project  1  1  os 

MP4-002 , 

MP4-004 

136 

Stop  Fuel 

MPF 

Bulk. 

Project  1  1  os 

MP4-003 

137 

Stop  Combustion 

MPF 

Bulk. 

Project  1  1  os 

MP4-005 

138 

Shutdown  Signal 

DFS 

Bursters,  Rockets, 

Ml 

1  nes 

DF 1-001 , 

DF2-005 

139 

Shutdown  Signal 

DFS 

Bursters,  Rockets, 

Ml 

nes 

DF2-001 , 

DF2-003 

140 

Stop  Fuel 

DFS 

Bursters,  Rockets, 

M 1  nes 

DF2-002 

141 

Stop  Combustion 

DFS 

Bursters,  Rockets, 

Ml 

1  nes 

DF2-004 

142 

Stop  Agent 

DFS 

Bursters,  Rockets, 

Ml 

nes 

DF2-006 

143 

Shutdown  Signal 

DFS 

Bursters,  Rockets, 

Ml 

1  nes 

DF2-006 

144 

Fast  Feed 

DFS 

Bursters,  Rockets, 

M  1 

nes 

DF3-001 

145 

Shutdown  Signal 

DFS 

Bursters,  Rockets, 

M 1  nes 

0F4-001 

146 

Shutdown  Signal 

DFS 

Bursters,  Rockets, 

Ml 

nes 

DF5-001 , 

DF5-003 

147 

Shutdown  Signal 

DFS 

Bursters.  Rockets. 

Ml 

nes 

DF5-001 , 

DF5-003 

148 

Stop  Fuel 

DFS 

Bursters,  Rockets, 

M 1  nes 

DF5-002 

149 

Shutdown  Signal 

DFS 

Bursters,  Rockets, 

Ml 

nes 

DF5-002 

150 

Stop  Fuel 

DFS 

Bursters,  Rockets, 

Ml 

nes 

DF5-004 

151 

Stop  Agent 

DFS 

Bursters,  Rockets, 

Mines 

DF5-005 

152 

Munition  Counting 

DUN 

A 1 1  Mun 1 1 1 ons 

DU  1-00 1 

153 

Munition  Counting 

DUN 

A  1 1  Mun 1 1 1 ons 

DU  1-002 

154 

Munition  Counting 

DUN 

A 1 1  Mun 1 1 1 ons 

DU  1-003 

155 

Munition  Counting 

DUN 

A  1  1  Mun 1 1 1 ons 

DU  1-004 

pump  operation,  undralned  munition,  furnace  ventilation,  ventilation 
system,  and  air  compressors.  Table  9-6  shows  the  error  events,  the  area 
of  the  plant  Involved,  the  munition  type  Involved,  the  scenario  Iden¬ 
tifier,  the  error  probability,  and  the  error  factor  associated  with  each 
quantification.  The  data  sources  for  the  error  types  are  described 
below.  The  data  represent  medians  and  error  factors  of  lognormal  dis¬ 
tributions. 

9. 2. 2. 4.1.  Ignition.  The  operator  or  malntalner  could  serve  as 
an  Ignition  source  In  some  areas  of  the  plant.  For  the  operators,  the 
credible  cases  consist  of  those  geographical  areas  In  v^lch  he  works  or 
traffics.  These  Include  the  control  room,  the  receiving  site  Unpack 
Area  (UFA),  the  Instrumentation  and  Electric  Power  room  (lEP),  and  the 
observation  corridors.  For  the  malntalners,  these  Include  all  areas 
(although  his  entry  Into  most  areas  may  be  limited  to  down  times). 
Operators  and  malntalners  could  Initiate  Ignition  by  using  an  Ignition 
source  In  the  area  (e.g.,  by  smoking  or  welding)  or  by  causing  sparks 
(e.g.,  by  dropping  a  munition  or  other  object  that  could  create  sparks). 
The  first  of  these  will  be  controlled  administratively  throughout  the 
plant;  the  operators  will  only  be  allowed  to  smoke  In  the  control  room 
and  outdoors. 

For  plant  areas  requiring  the  wearing  of  Level  C  or  higher  protec¬ 
tive  clothing,  masks  must  be  worn;  this  physically  rules  out  smoking  In 
these  areas.  Therefore,  smoking  as  an  Initiator  Is  credible  only  In  the 
control  room  and  In  the  lEP,  x^ere  Levels  E  and  D,  respectively,  are 
required.  Smoking  even  In  these  areas  Is  a  failure  of  administrative 
control. 

The  lox^er  bound  of  a  failure  of  administrative  control  Is  0.002 
(Ref.  9-26,  Table  20-6,  Item  1).  The  likelihood  of  a  checker’s  fall¬ 
ing  to  check  something  when  his  own  safety  Is  Involved  Is  1  x  10”^ 

(Ref.  9-26,  Table  20-22,  Item  9).  The  second  value  was  selected  as 
representative  of  this  situation.  Given  that  this  failure  of  adminis¬ 
trative  control  affects  their  own  safety  (and  assuming  that  30X  of  all 
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operators  smoke),  it  is  estimated  that  1  x  10"^  x  3.3  x  10'^  =  3.3  x 
10“'^  is  the  probability  of  smoking  initiating  a  fire. 

Operators  or  maintainers  could  cause  sparks  any  time  they  handle  a 
weapon  or  use  metal  tools,  which  they  are  likely  to  do  in  any  area  of 
the  plant.  Except  for  the  UPA,  some  sort  of  upset  would  probably  have 
to  have  occurred  for  them  to  be  handling  munitions  or  using  tools.  The 
likelihood  of  their  causing  sparks  in  such  a  case  is  the  same  as  that  of 


their  dropping  a  rrrjnltlon  during  handling.  The  estimated  probability  of 
dropping  a  single  munition  when  it  is  hand-carried  by  a  two-man  crew 
dressed  in  DPE  was  estimated  as  6  x  10"^  in  the  HRA  for  handling 
scenarios  as  described  in  Chapter  8. 

9. 2. 2. 4. 2.  Fire  Suppression.  Wlien  a  fire  occurs  in  the  UPA,  the 
control  room,  the  UPS,  Che  lEP,  the  communications  room,  or  the  TOX,  an 
automatic  fire-suppression  system  should  come  on.  If  the  automatic  sys¬ 
tem  fails  to  start,  the  operators  can  initiate  it  from  the  control  room. 
He  does  this  in  response  to  an  annunciator  alarming  on  the  panel  dedi¬ 
cated  to  fire  alarms  (an  annunciator  there  always  indicates  fire  some¬ 
where  in  the  plant).  There  are  probably  several  other  annunciators 
alarming  at  the  same  time;  we  assumed  six  for  this  analysis.  Item  6 
from  Table  20-23  (Ref.  9-26),  5  x  10“^,  was  used  to  estimate  the 
likelihood  of  the  operator’s  failing  to  Initiate  the  failed  automatic 


fire-suppression  system. 


If  the  fire-suppression  system  still  does  not  respond,  or  if  the 
fire  is  in  an  area  of  the  plant  that  has  no  automatic  system,  the  next 
recourse  for  extinguishing  the  fire  is  to  isolate  the  room  where  it  is 


burning.  The  operators  can  do  this  by  closing  the  exhaust  dampers  for 
the  room  in  question.  Again,  they  can  do  this  from  the  control  room. 
For  this  analysis,  we  assumed  that  the  operators’  training  would  empha¬ 
size  room  isolation  as  the  best  method  of  fire-fighting  outside  of  the 


use  of  automatic  systems.  Therefore,  the  problem  is  one  of  the  opera¬ 
tors’  remembering  that  there  is  a  viable  solution  to  a  fire. 

The  nominal  diagnosis  model  from  NUREG/CR-1278  (Ref.  9-26),  was  used 
as  the  basis  to  estimate  the  likelihood  that  the  operators  won’t  select 
room  isolation.  Since  the  "diagnosis"  task  here  is  fairly  straightfor¬ 
ward  and  since  we  have  assumed  that  training  will  emphasize  isolation  as 
the  action  of  choice,  we  used  the  lower  bound  of  that  curve  to  represent 
the  case  in  which  the  fire  is  in  a  room  without  any  automatic  fire- 
suppression  system. 

If  the  fire  does  involve  one  of  the  rooms  mentioned  above,  the 
operators  will  likely  spend  at  least  5  min  trying  to  start  the  failed 
automatic  system.  Since  the  diagnosis  curve  is  time-based,  5  min  of 
decision  time  is  lost  early  in  the  accident.  The  modified  curve 
accounting  for  this,  along  with  the  curve  used  for  the  rooms  without 
fire-suppression  systems,  is  shown  in  Fig.  9-1.  The  results  of  the 
analysis  will  show  that  the  delay  in  diagnosing  the  need  for  isolation 
is  more  than  compensated  for  by  having  an  automatic  system. 

If  the  automatic  fire-suppression  system  (if  any)  does  not  func¬ 
tion  and  if  room  Isolation  is  not  achieved  (or  if  it  is  not  achieved  in 
time),  the  operators’  last  resort  is  to  enter  the  area  with  the  fire  and 
fight  it  with  the  hand-held  fire  extinguishers  thrt  are  located  through¬ 
out  the  plant.  If  it  is  an  agent  fire,  if  DPE  protective  clothing  is 
necessary  to  enter  the  area,  or  if  burstered  munitions  are  in  the  area, 
it  is  assumed  that  the  operators  will  not  elect  to  try  this  option;  they 
will  not  fight  the  fire  at  the  site  in  any  of  these  cases.  If  the  fire 
is  in  an  area  they  can  enter  wearing  street  clothes  and  masks  and  if 
burstered  munitions  are  not  present,  it  is  estimated  that  there  is  a  5  x 
10“2  probability  that  they  will  fail  to  try  at-site  fire  fighting.  This 
estimate  is  based  on  scientific  judgment. 
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For  a  complicated  scenario  such  as  this,  THERP  suggests  the  use  of 
an  HRA  event  tree.  The  HRA  event  tree  for  this  f Ire-suppresslon  model 
Is  shown  In  Fig.  9-2,  and  the  results  of  quantifying  It  are  shown  In 
Table  9-7. 

9. 2. 2. 4. 3.  Conveyor  Loading.  In  the  UPA,  operators  In  Level  C 
protective  clothing  (masks  worn)  unload  munitions  and  bulk  containers 
from  pallets  and/or  trucks  and  place  them  onto  the  conveyor  system  that 
then  carries  the  munitions  and  containers  through  the  process  areas. 
Smaller  munitions  such  as  mines,  projectiles,  cartridges,  and  MSS  rock¬ 
ets  are  lifted  by  hand  (sometimes  by  two  operators)  and  placed  onto  the 
conveyors.  There  are  metering  devices  that  ensure  proper  alignment  of 
the  rockets  on  the  conveyor  and  allow  only  a  single  munition  at  a  time 
to  enter  the  ECV,  When  hand- loading  the  projectiles,  operators  could 
drop  the  munition  In  the  UPA.  The  estimated  probability  of  dropping  a 
single  munition  when  It  Is  hand-carried  by  a  two-man  crew  dressed  In 
Level  C  protective  clothing  has  been  estimated  as  3  x  10“^  in  the  HRA 
for  handling  scenarios. 

The  conveyor  itself  has  1/2-ln.  high  guard  rails  that  prevent  a 
munition’s  falling  off  the  conveyor.  Even  If  the  operators  load  the 
munition  crookedly,  the  guard  rails  and  the  metering  device  will  orient 
It  properly  as  It  passes  Into  the  ECV.  The  only  other  possible  error 
Involves  their  loading  the  munition  backwards.  Since  we  assume  that  the 
operators  will  usually  pick  up  the  same  end  of  each  munition  (at  least 
for  a  time),  the  likelihood  of  their  standing  in  the  wrong  position--a 
necessary  condition  for  loading  the  munitions  backwards--is  very  low. 

It  has  been  estimated  to  be  an  order  of  magnitude  lower  than  the  drop 
probability,  or  3  x  10”^.  The  likelihood  that  a  munition  Is  loaded 
improperly  by  the  operators  such  that  it  could  drop  during  loading  or 
fall  off  the  conveyor  as  a  result  of  Improper  loading  is  the  sum  of 
these  two  error  probabilities,  or  3  x  10”^  +  3  x  10"^  =  3.3  x  10-4. 


TABLE  9-7 

THERP  QUANTIFICATION  OF  FIRE-SUPPRESSION  MODEL 


Probability  That  Operators  Fall  to 
Suppress  the  Fire  (DPE  required  or 
Burstered  Munitions  Present) 
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Ton  containers,  spray  tanks,  and  bombs  are  loaded  onto  the  conveyor 
using  a  forklift  lifting  beam.  The  estimated  probability  of  dropping  a 
single  bulk  item  when  a  two-man  crew  in  Level  C  protective  clothing  use 
a  forklift  with  a  lifting  beam  was  estimated  as  1.5  x  10"^  in  the  HRA 
for  handling  scenarios.  The  only  other  credible  errors  are  those  of 
loading  the  containers  crookedly  (a  no-cost  error  given  the  guard  rails) 
or  backwards.  Backwards  loading  is  most  likely  with  a  ton  container 
since  its  exterior  profile  shows  no  obvious  fore  or  aft  indication 
(except  for  location  of  the  plugs).  Again,  the  operators  have  separate, 
assigned  duties  during  loading.  Since  the  ton  containers  should  be 
guided  by  one  operator  vdille  the  other  operator  drives  the  forklift,  the 
likelihood  of  its  being  Improperly  loaded  is  estimated  to  be  an  order  of 
magnitude  lower  than  the  drop  probability,  or  1.5  x  10“^.  The  likeli¬ 
hood  that  any  kind  of  bulk  container  is  loaded  Improperly  by  the  opera¬ 
tors  is  the  sum  of  these  two  error  probabilities,  or  1  x  10"^  +  1  x 

10-6  =  1.65  X  10-5. 

9. 2. 2. 4. 4.  Munition  Counting.  When  munitions  are  unloaded  in  the 
UFA,  the  packing  material  is  sent  to  the  Dunnage  Incinerator  (DUN).  If 
a  munition  is  left  in  the  packing  material  (if  it  is  not  unpacked),  it 
will  be  sent  as-is  to  the  DUN,  also.  The  operators  must  keep  track  of 
the  pallets  and  barrels  passing  through  the  UFA  to  ensure  that  they  are 
emptied  before  being  disposed  of.  All  pallets  are  unloaded  completely 
before  beginning  the  next  pallet-unloading  operation.  In  other  words, 
two  pallets  are  never  partially  unloaded  because  of  their  being  unpacked 
simultaneously.  Since  the  pallet  layers  must  be  removed  to  access 
munitions  on  the  next  layer  down,  it  is  not  likely  that  operators  will 
miss  a  palletized,  unpacked  munition.  Also,  the  pallet  itself  does  not 
obscure  the  individual  munitions  from  view  even  before  it  has  been 
removed.  The  likelihood  that  an  operator  will  fail  to  unpack  a  pallet 
completely  and  send  the  unpacked  munition  to  the  DUN  along  with  the 
dismantled  pallet  is  negligible. 


Mines  are  packed  three  to  a  barrel;  their  fuzes  are  packed  sepa¬ 
rately  but  In  the  same  barrel.  There  are  six  barrels  on  a  pallet.  Once 
the  pallet  has  been  dismantled,  the  barrels  themselves  must  be  unpacked. 
The  barrels  are  Inverted  Inside  a  glove  box  one  at  a  time,  then  lifted 
off  of  the  mines  and  the  packing  material.  Once  the  barrel  has  been 
eiqptled,  It  Is  used  to  hold  the  discarded  packing  material  for  the  trip 
to  the  DUN.  For  a  mine  to  enter  the  DUN  along  with  the  packing  mate¬ 
rial,  It  would  have  to  be  placed  In  the  barrel  instead  of  on  the  con¬ 
veyor.  I&inltlon  accountability  with  respect  to  the  number  processed 
will  be  checked  before  the  dunnage  Is  disposed  of;  this  provides  a  mea¬ 
sure  of  recovery  should  this  highly  unlikely  event  occur.  The  probabi¬ 
lity  of  a  mine  being  fed  to  the  DUN  along  with  Its  packing  material  is 
assumed  to  be  negligible. 

9. 2. 2. A. 5.  Tank  Overfill.  When  draining  a  bulk-agent  container, 
the  agent  is  transferred  to  an  agent  tank  in  the  Toxic  Cubicle  (TOX). 
When  the  agent  tank’s  capacity  is  reached,  the  process-control  system 
should  automatically  halt  the  transfer.  If  the  high-level  sensor  on  the 
tank  fails  or  if  some  other  failure  occurs  such  that  the  transfer  is  not 
halted,  the  operator  who  Initiated  the  transfer  can  halt  it  manually 
before  the  tank  spills  over. 

It  should  be  stated  in  the  plant’s  administrative-control  policies 
(and  even  In  the  process-control  logic)  that  a  bulk  container  should  not 
be  drained  unless  its  entire  contents  can  be  accepted  by  a  single  agent 
tank.  Of  the  two  agent  tanks  In  the  TOX,  the  operators  could  have 
selected  (and  the  process-control  logic  could  have  defaulted  to  allow) 
the  wrong  tank  to  receive  the  agent  from  a  bulk  container.  If  this 
wrong  tank  has  insufficient  capacity  to  accommodate  the  contents  of  the 
container,  TOX  tank  level  will  approach  and  then  exceed  its  maximum 
sometime  during  transfer.  The  probability  of  a  selection  error  when 
dealing  with  displays  with  clearly  delineated  mimic  lines  is  estimated 
to  be  5  X  10”^  (Ref.  9-26,  Table  20-9,  item  1).  Since  this  error  has  to 
occur  In  conjunction  with  a  process-control  failure  (the  probability  of 
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which  Is  estimated  to  be  1  x  10"^),  the  likelihood  that  the  wrong  tank 
will  be  selected  to  receive  the  agent  is  5  x  10~^. 

Assuming  that  agent  is  being  transferred  to  a  too-£ull  tank,  a  sen¬ 
sor  should  halt  the  transfer  at  the  tank’s  high-level  setpoint.  If  the 
sensor  fails,  the  operator  (who  should  be  monitoring  the  transfer  inter¬ 
mittently)  might  notice  the  tank’s  high  level  and  halt  the  transfer  man¬ 
ually  before  a  spill  occurs.  A  typical  transfer  operation  takes  about 
30  min;  it  Is  not  assumed  that  the  operator  will  watch  the  levels  in  the 
bulk  container  and  the  TOX  tank  for  that  whole  period  (although  it  is 
assumed  that  he  will  monitor  both  levels  at  some  point  since  he  initi¬ 
ated  the  transfer).  Rather,  it  is  assumed  that  he  will  initiate  the 
transfer  and  then  leave  to  complete  other  tasks  while  it  is  going  on;  it 
is  also  assumed  that  he  will  return  to  view  the  monitor  screen 
periodically  during  the  transfer  to  check  its  progress. 

The  estimated  probability  of  his  not  noticing  that  the  level  of  the 
TOX  tank  is  dangerously  high  during  the  transfer  operation  is  based  on 
the  estimated  probability  of  an  error  mad<c  in  reading  quantitative 
information  from  an  analog  meter,  3  x  10“^  (Ref.  9-26,  Table  20-10, 
item  1).  The  lower  bound  of  1  x  10“^  is  used  for  this  case  to  reflect 
better-quality  reading  characteristics  associated  with  CRT  analog  dis¬ 
plays.  If  the  operator  returns  several  times  during  the  transfer  to 
check  the  level  of  the  TOX  tank,  the  memory  of  his  first  reading  will 
influence  his  perception  of  subsequent  readings,  so  they  were  considered 
a  perceptual  unit.  Both  error  probabilities  are  summed  to  estimate  the 
total  human-error  contribution  to  this  scenario.  This  means  that  5  x 
10-7  +  1  X  10-3  -  1  X  10-3. 

9. 2. 2. 4. 6.  Sump  Pump  Operation.  When  there  has  been  a  spill  in 
the  TOX,  the  sump  pump  provides  some  level  of  mitigation.  If  the  sump 
pump  falls  to  operate  following  a  spill,  there  is  still  a  chance  that 
the  operators  could  start  it  manually  from  the  control  room.  Since  the 
spill  in  the  TOX  has  already  occurred  when  the  sump  pump  falls,  there 


are  probably  several  annunciators  alarming  t^en  the  sump  punq>  alarm  goes 
off.  Assuming  there  are  ten  annunciators  competing  for  the  operator’s 
attention,  5  x  lO"^  (Ref.  9-26,  Table  20-23,  Item  10)  Is  the  probability 
that  he  will  fall  to  respond  to  the  sump  pump  alarm. 

9. 2. 2. 4. 7.  Undralned  Munition.  There  Is  some  chance  that  an 
undralned  ton  container  will  reach  the  MPF,  where  It  presents  a  consid¬ 
erable  hazard.  There  are  two  points  at  \ihlch  the  operator  might  notice 
this  and  Intervene  to  prevent  Its  Introduction  Into  the  MPF.  The  first 
of  these  Is  In  the  MFB  as  the  container  Is  being  drained.  The  operator 
should  have  Initiated  the  drain  operation  and  should  be  watching  for 
some  Indication  that  It  Is,  In  fact,  taking  place. 

The  second  potential  for  operator  Intervention  comes  as  the  con¬ 
tainer  leaves  the  BSA  and  Is  weighed  before  being  transferred  to  the 
MPF.  The  operator  should  check  the  reading  at  the  weigh  station  before 
allowing  the  container  to  continue  to  the  MPF.  The  likelihood  that  the 
operator  does  not  watch  an  operation  that  he  Is  supposed  to  monitor  on 
the  CRT  screen  and/or  the  CCTV  Is  assumed  to  be  equivalent  to  his  not 
followlng/uslng  a  set  of  written  procedures.  The  error  probability  for 
his  falling  to  monitor  the  screen(s)  Is  1  x  10“^,  taken  from  Ref.  9-26, 
Table  20-6,  Item  3.  This  Is  used  for  his  falling  to  monitor  the  drain 
operation  In  the  MDB  before  the  container  Is  transported  to  the  BSA  and 
also  for  his  falling  to  check  the  weight  of  the  container  as  It  leaves 
the  BSA. 


If  the  operator  checks  the  container’s  weight,  there  Is  a  chance 
that  he  will  misread  the  weight  on  the  CRT  display.  The  probability 
of  a  misreading  error  vdien  using  a  CART  analog  display  Is  1  x  lO"^ 

(Ref.  9-26,  Table  20-10,  Item  1,  lower  bound).  The  likelihood  that  the 
operator  In  neither  case  acts  to  prevent  an  undralned  container’s 
entering  the  MPF  Is  calculated  as  (1  x  lO"^  x  1  x  10“2)  +  1  x  lO"^  = 

1.1  X  10-3. 


9. 2. 2. A. 8.  Ventilation  System.  Any  time  there  Is  a  ventilation 
system  failure,  there  Is  some  chance  that  the  operators  could  effect 
recovery.  For  areas  outside  the  furnace  rooms,  the  operators  should 
shut  off  the  air  supply  fans  within  an  hour  of  ventilation  system  fail¬ 
ure.  There  Is  no  direct  Indication  that  this  Is  the  needed  action,  so 
some  diagnosis  Is  Involved.  Using  a  standard  diagnosis  curve,  the  like¬ 
lihood  of  their  having  failed  to  shut  off  the  air  supply  fans  by  the  end 
of  an  hour  Is  estimated  as  1  x  10~^  using  Fig.  12-4  from  NUREG/CR-1278 
(Ref.  9-26) 

9. 2. 2. 4. 9.  Furnace  Ventilation.  For  ventilation  system  failures 
Involving  the  furnace  rooms,  the  scenario  Is  somewhat  different.  One 
train  should  be  In  service  at  all  times.  If  that  ventilation  train 
falls,  the  operators  can  valve  In  an  alternate  train.  This  involves 
closing  the  dampers  to  the  failed  system,  opening  the  dampers  and  head¬ 
ers  to  the  alternate  system,  and  starting  up  the  alternate  system.  The 
primary  ventilation  system  Is  assumed  to  fall  at  least  10  min  following 
an  Initiator  Involving  furnace  shutdown;  once  It  has  failed,  the  opera¬ 
tor  has  about  10  more  minutes  to  complete  the  transfer  to  avoid  serious 
consequences . 

Since  the  ventilation  system  failure  occurs  10  min  after  the  fur¬ 
nace  shutdown,  the  two  failures  do  not  occur  "closely  In  time".  More¬ 
over,  different  operators  are  dedicated  to  monitoring  the  furnace  and 
the  ventilation  systems.  Therefore,  the  first-event  diagnosis  model 
(Ref.  9-26,  Table  20-3,  Item  1)  was  chosen  to  model  this  event.  Since 
the  furnace  shutdown  Is  likely  to  lead  to  ventilation  system  failure, 
the  operators  may  expect  to  have  to  deal  with  that  problem.  Because  of 
their  expectation,  the  lower  bound  of  the  nominal  diagnosis  model  value, 
or  1  X  10“^,  was  used. 

9.2.2.4.10.  Air  Compressors.  Some  sequences  assumed  a  reduced 
capacity  of  the  primary  plant-air  and  Instrument-alr  compressor  because 
of  a  downstream  blockage.  Since  the  blockage  does  not  Involve  the 


compressor  Itself,  no  trouble  alaim  associated  with  It  will  sound. 
Instead,  a  low-pressure  alarm  for  downstream  will  sound  at  some  time, 
after  which  there  Is  a  15-mln  period  before  reserve-air  Inventory  Is 
depleted. 

The  non-occurring  trouble  alarm  would  have  been  sufficient  to  cause 
automatic  transfer  to  the  standby  compressor;  since  It  did  not  alarm, 
the  transfer  must  be  Initiated  by  an  operator  sometime  In  that  15-mln 
Interval.  This  depends  on  his  noticing  the  low-pressure  alarm  since  an 
operator’s  recognition  of  an  annunciator  means  that  he  will  respond  to 
that  annunciator.  It  Is  assumed  that  there  would  have  been  no  other 
shutdowns  (nor  their  associated  alarms)  for  at  least  15  min  before  the 
low-pressure  alarm  sounds,  so  the  error  estimate  listed  as  Item  1  In 
Ref.  9-26,  Table  20-23,  was  used. 
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10.  AGENT  RELEASE  CHARACTERIZATION 


Section  10.1  describes  the  approach  used  In  this  study  for  analyz¬ 
ing  the  agent  release  for  the  various  accident  conditions.  Application 
of  the  approach  to  the  accident  sequences  analyzed  In  the  onsite  dis¬ 
posal  phases  Is  discussed  In  Section  10.2. 

The  consequences  of  an  agent  release  event  are  strongly  dependent 
on  agent  type,  amount  of  agent  release,  and  the  mode  and  duration  of  the 
release.  Agent  dispersion  and  subsequent  effects  will  be  calculated  In 
a  separate  study  using  a  computer  program  called  D2PC  (Ref.  10-1}  that 
embodies  an  analytical  model  for  calculating  agent  dispersion  under  dif¬ 
ferent  meteorological  conditions.  Feedback  from  these  consequence 
calculations  helped  to  guide  the  release  characterization. 

10.1.  RELEASE  ANALYSIS  APPROACH  AND  BASES 

10.1.1.  Approach 

The  approach  formulaton  was  aided  by  a  systematic  review  of  the 
mechanisms  involved  in  expelling  agent  from  its  normal  confinement. 

The  first  result  of  the  systematic  review  was  to  divide  the  accident 
sequences  into  two  groups;  (1)  those  that  occur  while  the  agent  is 
still  present  In  the  munitions  and  (2)  those  that  occur  after  the  agent 
has  been  separated  from  the  munition.  The  first  group  Is  associated 
with  the  activities  of  storage,  handling,  and  transportation,  while  the 
latter  group  is  associated  with  the  activities  of  plant  operations.  For 
the  latter  group,  the  analyses  performed  by  Arthur  D.  Little  for  the  M55 
rockets  (Refs.  10-2  through  10-6)  were  partially  applicable,  and  similar 
assumptions  as  appropriate  were  made  for  this  analysis.  Additional  cal¬ 
culations  were  performed  in  this  study  to  determine  the  quantity  of 


agent  released  to  the  environment  for  plant  operation  accidents 
Involving  munitions  other  than  the  M55  rockets. 


For  the  accident  sequences  that  Involve  agent  still  confined  In  the 
munition,  the  agent  release  Is  dependent  on  the  munition’s  mechanical 
and  thermal  failure  thresholds,  and  the  behavior  of  the  explosives  and 
propellants  during  the  accident  sequences.  These  are  discussed  In  the 
following  sections.  Once  It  was  determined  that  the  agent  could  be 
released  from  Its  normal  confinement,  calculations  were  performed  to 
determine  the  amount  of  agent  released  and  the  possible  paths  by  which 
the  agent  could  enter  the  atmosphere. 

10.1.2.  Mechanical  Failure  Release 


Munition  failures  result  when  sufficient  forces  are  generated  dur¬ 
ing  accidents.  A  discussion  of  the  munition  failure  thresholds  Is  given 
In  Appendix  F.  The  failure  thresholds  of  Interest  are: 

1.  Mechanical  failure  of  the  agent  containment  due  to  Impact, 
crush  or  puncture. 

2.  Detonations  Initiated  by  Impact  or  fire. 

3.  Thermally  Induced  hydraulic  rupture  of  the  agent  containment. 

10.1.2.1.  Impact  Failure.  The  threshold  for  Impact  failure  Is  given  in 
terms  of  velocity  of  impact  against  a  nonyielding  object,  or  the  equiva¬ 
lent  drop  height.  When  the  Impact  failure  threshold  Is  reached.  It  Is 
assumed  that  the  onset  of  failure  begins.  In  the  case  of  an  accident 
Involving  more  than  one  munition,  e.g.,  a  pallet  drop  or  a  truck  colli¬ 
sion,  every  munition  does  not  experience  the  effect  of  impacting  a  non¬ 
yielding  surface.  At  the  threshold  point.  It  is  assumed  that  at  least 
one  munition  has  experienced  failure.  It  was  further  assumed  that  the 
number  of  munitions  that  experience  failure  is  a  function  of  the  kinetic 
energy  Involved  In  the  accident.  For  munitions  in  a  transportation 


package,  the  failure  threshold  for  both  the  package  and  the  munition 
must  be  exceeded  In  order  to  cause  an  agent  release. 


The  intact  velocity  required  to  Initiate  failure  varies  from  35  mph 
for  rockets  (drop  height  of  40  ft)  to  50  mph  for  projectiles  (drop 
height  of  120  ft).  The  expected  Impact  velocity  (or  drop  height)  for 
some  accidents  Is: 

Impact  Velocity  of 

Accident  Type  Drop  Height 

Pallet  drop  during  handling  6  ft 
Forklift  collision  5  nq>h 

Truck  accident  onsite  10  to  25  s^h  (administrative 

control  Is  assumed  to  be 
10  mph) 

In  view  of  the  above,  failure  due  to  Inpact  Is  not  considered  to  be  a 
significant  contribution  for  handling  accidents  and  onsite  truck  trans¬ 
portation  accidents,  l.e.,  other  failure  mechanisms  dominate. 

10.1.2.2.  Crush  Failure.  Crush  forces  are  static  forces  completely 
Independent  of  velocity.  Crush  forces  may  arise  from  a  vehicle  overturn 
or  from  a  building  collapse  due  to  an  earthquake. 

Crush  thresholds  are  defined  for  a  single  munition  for  a  pallet 
of  munitions  and  for  the  transportation  package  when  transportion  Is 
Involved.  Vhen  the  crush  threshold  for  pallets  Is  exceeded.  It  was 
conservatively  assumed  that  all  munitions  In  the  pallet  will  fall. 

A  linear  relationship  for  the  nutnber  of  units  that  would  fall  due 
to  crush  was  assumed  as  follows: 

F 

n  -  tr  ,  (10-1) 

'o 

where  F  -  crush  force  available  In  the  accident, 

Fq  «  crush  force  threshold  for  the  palletized  munition. 


At  n  ■  1,  all  the  munitions  In  one  pallet  have  failed.  The  avail¬ 
able  force  in  an  accident  can  be  the  weight  of  a  vehicle,  the  weight  of 
a  building  collapse,  or  the  weight  of  any  large  object  that  can  fall  on 
the  munitions.  For  those  accidents  involving  a  transportation  package, 
the  crush  force  available  must  exceed  the  threshold  for  failing  both  the 
package  and  the  munition. 

The  accident  sequences  that  are  capable  of  generating  forces  suffi¬ 
ciently  high  to  produce  crush  Involve  transportation  and  storage  where 
many  pallets  may  be  Involved  in  the  accident.  Thus,  it  is  possible  that 
more  than  one  pallet  can  fall.  For  exanqple,  the  crush  threshold  for  a 
rocket  pallet  containing  15  rockets  is  43,400  lb.  If  the  weight  of  an 
object  is  100,000  lb,  Eq.  10-1  predicts  a  failure  quantity  of  2.3.  This 
corresponds  to  2.3  pallets,  or  about  34  rockets  being  crushed.  If  the 
available  crush  force  is  less  than  the  failure  threshold  for  a  single 
munition,  then  naturally,  no  munitions  fail« 

Equation  10-1  is  conservative  because  it  assumes  that  the  total 
available  load  arising  from  an  accident  is  concentrated  in  the  most 
efficient  way  to  crush  the  munitions.  If  the  load  was  uniformly  dis¬ 
tributed  over  many  pallets,  fewer  or  no  failures  would  occur. 

10.1.2.3.  Puncture  Failure.  The  puncture  threshold  is  defined  in  terms 
of  the  ratio  of  velocity  to  radius  of  curvature  assuming  the  munition 
(or  pallet)  impacts  an  unyielding  slender  object  or  probe.  Generally, 
the  failure  threshold  for  puncture  is  the  lowest  of  the  three  mechanical 
failure  thresholds.  The  number  of  failures  that  can  occur  in  an  acci¬ 
dent  is  dependent  on  the  number  of  probes  present.  If  the  puncture 
failure  threshold  is  exceeded,  it  is  assumed  that  one  probe  will  fall 
one  munition. 

10.1.2.4.  Liquid  Spills  and  Evaporation.  Once  mechanical  failure 
occurs,  the  munition  agent  Inventory  may  be  able  to  spill  out  on  the 
ground  or  water.  For  fork  tine  punctures,  the  puncture  is  assumed  to 


consist  of  a  3-ln.  diameter  hole  Just  below  the  munition  centerline. 

The  amount  and  time  of  spill  Is  calculated  to  be  that  which  can  drain  by 
gravity  out  of  the  hole.  Inq>act,  crush  and  probe  punctures  are  assumed 
to  result  In  the  spill  of  the  entire  munitions  Inventory. 

If  the  spill  occurs  outdoors,  during  handling  or  transport,  the 
release  analysis  ends  with  the  determination  of  the  type  and  mass  of 
liquid  agent  spilled  and  type  of  surface  where  the  spill  occurs.  This 
Information  Is  sufficient  Input  for  calculation  of  atmospheric  disper¬ 
sion  by  the  D2PC  computer  program.  All  liquid  spills  during  handling  or 
ground  transport  are  assumed  to  occur  on  a  hard,  flat  Impervious  surface 
such  as  level  concrete  or  asphalt.  The  evaporation  of  the  spill  Is  cal¬ 
culated  by  the  D2PC  program  (Ref.  10-1)  by  calculating  the  maximum 
puddle  area  and  the  corresponding  evaporation  rate. 

If  the  spill  occurs  Indoors,  the  release  analysis  In  this  report 
extends  to  the  time  dependent  rates  of  evaporation.  In  general,  the 
02PC  program  wss  applied  to  calculate  the  evaporation  rate  based  on  the 
type  and  mass  of  agent  spill  and  considering  any  confinement  of  the 
liquid  puddle  or  pool.  The  D2PC  general  equation  for  evaporation  of  a 
spill  over  a  floor  area  corresponding  to  a  liquid  pool  depth  of  1/32  In. 
relates  the  time  t  to  evaporate  the  entire  spill  Inventory  M  (pounds) 

In  terms  of  a  power  function  of  M  and  two  coefficients  a  and  b.  The 
equation  Is 

t  -  aMb  ,  (10-2) 

where  t  ■  time  In  thousands  of  minutes, 

a,  b  ■  constant  for  agent  GB  (a  «  0.79,  b  -  0.253), 
a,  b  >  functions  of  M  for  agents  H  and  VX. 


I 

'1 


Thtt  area  (ft^)  corresponding  to  the  spill  M  (lb)  and  pool  thickness 
1/32  In.  Is  5.91  times  M.  For  restricted  pool  areas,  the  equation  must 
be  modified.  This  equation  and  coefficients  a  and  b  are  based  on  data 
from  the  Army  derived  from  the  con^uter  program  D2PC  output. 


For  a  given  accident  sequence  the  spill  will  generally  not  evapo¬ 
rate  to  conpletlon  because  human  Intervention  will  mitigate  the  spill  by 
covering  It  with  foam  or  some  other  means.  In  such  a  case,  an  evapora¬ 
tion  rate  Is  calculated  and  applied  until  the  time  estimated  for  mitiga¬ 
tion  or  cleanup  of  the  spill. 


From  Eq.  10-2,  the  hourly  evaporation  rate  Is 


i  Hi-b 

•  10^  min 


(10-3) 


where  has  units  of  Ib/h.  This  equation  applies  whenever  the 
1/32-ln.  deep  spill  pool  area,  which  from  the  agent  density  Is  about 
6  ft^  for  each  lb  of  spill.  Is  smaller  than  the  actual  confined  pool 
area  (floor  or  sunq>).  Some  buildings  contain  floors  which  slope  to 
sumps,  as  In  the  following! 


Building  Area 


Sunq)  Size 
(ft) 


2x2x2 


TOX  cubicle 


4  X  5  X  3.5 


2x3x4 


Warehouse 


Storage  Igloo 


Where  a  sump  Is  present,  the  following  procedure  Is  used  to  cal¬ 
culate  evaporation.  Initially,  the  spill  Is  assumed  to  wet  the  entire 
sloped  floor  area.  Thus,  Eq.  10-3  Issued  for  a  10  min  time  period  with¬ 
out  modification  for  pool  area,  unless  the  1/32-ln.  deep  pool  area  Is 
larger  than  the  actual  floor  area.  Hodlflcatlon  consists  of  limiting 


M  in  Eq.  10-3  to  the  mass  of  a  1/32-ln.  layer  of  agent  over  the  actual 
floor  area.  After  10  min,  the  evaporation  rate  Is  assumed  to  be  lim¬ 
ited  by  the  sump  horizontal  cross  sectional  area  until  the  assumed 
mltlgatlon/cleanup  time  when  It  drops  to  zero.  Such  limitation  amounts 
to  modifying  M  In  Eq.  10-3  to  the  mass  of  a  1/32-ln.  layer  In  the  sunq>. 

A  special  case  Is  the  spill  of  a  ton  container  In  the  MDB  where  a 
single  UFA  sump  Is  too  small  to  hold  the  entire  Inventory.  In  this  case 
the  overflow  area  Is  calculated  based  on  the  volume  of  agent  In  a  TC  and 
the  floor  slope  (1/4  In.  rise  per  linear  foot). 

10.1.3.  Detonations 

The  burstered  munitions  Incorporate  proven  design  features  to  pre¬ 
clude  accidental  detonation  during  routine  handling  and  transportation. 
The  Impact  threshold  for  Initiating  detonation,  approximately  160  mph 
(see  discussion  In  Appendix  F),  Is  well  above  the  potential  lnq)act 
velocity  for  all  accidents  except  an  aircraft  crash.  When  a  munition 
Is  subjected  to  an  Impact  velocity  greater  than  the  detonation  threshold 
velocity,  there  Is  still  a  low  probability  of  detonation,  but  It  Is  pos¬ 
sible.  Data  does  not  exist  to  develop  a  meaningful  relationship  for 
predicting  the  number  of  detonations  that  could  occur  given  an  air¬ 
craft  crash  Into  a  munitions  storage  area  or  transport  vehicle.  This 
rationale  Is  that,  given  a  stack  of  munitions  pallets  In  storage  or  In  a 
transport  vehicle,  the  munitions  In  the  first  row  would  absorb  most  of 
the  Impact  energy.  These  munitions  could  detonate.  The  others  would 
then  be  subjected  to  the  energy  of  the  detonations,  as  well  as  part  of 
the  energy  of  the  aircraft  crash.  It  Is  known  that  the  detonations  do 
not  propagate,  but  It  Is  assumed  that  many  of  them  would  rupture.  This 
logic  was  applied  to  all  the  aircraft  crash  scenarios  and  a  general 
result  was  reached.  The  conservative  estimate  Is  that: 

1.  Fifteen  percent  of  the  munitions  Involved  In  the  crash 
detonate. 


2.  Seventy  percent  of  the  rupture  and  release  their  agent 
content . 

3.  Fifteen  percent  are  scattered  but  remain  Intact. 

For  impacts  of  burstered  munitions  in  pallets,  if  a  single  munition 
detonation  occurs  it  is  assumed  to  rupture  each  surrounding  munition  in 
the  pallet.  A  centrally  located  munition,  which  has  the  largest  number 
of  surrounding  units.  Is  conservatively  assumed  to  be  the  one  which 
detonates,  even  though  it  is  less  likely  to  detonate  at  this  location 
than  at  the  end.  For  projectiles,  cartridges,  and  mortars,  the  number 
of  adjacent  munitions  ruptured  is  five. 

For  rockets  and  mines  only,  the  detonation  of  more  than  one  muni¬ 
tion  was  calculated  to  be  credible  for  certain  pallet  impacts.  In  such 
cases,  two  rockets  detonate,  rupturing  13  adjacent  rockets.  Or,  three 
mines  detonate  rupturing  15  adjacent  munitions. 

10.1. A.  Fire  Release 

Munitions  subject  to  fire  can  fall  due  to  thermally  initiated 
detonations  or  due  to  hydraulic  rupture.  It  is  assumed  that  fires  in 
direct  contact  with  burstered  munitions  will  be  left  unattended  and 
allowed  to  burn  until  all  combustible  materials  are  consumed.  Thus, 
bursters  will  detonate.  Some  neighboring  munitions  will  fall  due  to  the 
detonation.  The  failed  munitions  will  spill  combustible  agent  which 
will  further  fuel  the  fire.  The  fire  will  spread,  leading  to  more 
detonations,  and  so  on. 

Tests  at  GA  on  4.2-in.  mortar  projectiles  and  8-ln.  projectiles 
showed  that  a  detonation  of  a  munition  in  a  close  packed  array  will 
cause  the  munitions  adjacent  to  the  detonated  munition  to  break  and 
spill  their  agent  (Ref.  10-7).  Other  munitions  not  in  direct  view  of 


the  detonated  munition  were  disheveled,  but  remained  intact.  Thus,  one 
detonation  is  not  sufficient  to  break  all  the  munitions  involved  in  the 
accident.  A  chain  reaction  must  take  place.  The  bursters  in  the  neigh¬ 
boring  munitions  broken  by  a  detonation  will  be  subjected  to  more  rapid 
heating  than  those  of  an  intact  munition.  These  bursters  will  detonate 
at  a  critical  temperature,  but  it  is  assumed  that  detonation  of  a 
drained  munition  will  not  contribute  to  the  agent  release. 


Based  on  the  test  results  described  above,  it  is  inferred  that  all 
munitions  in  direct  view  of  a  munition  detonation  would  be  broken.  In  a 
rectangular  array,  typical  for  the  munition  storage  configurations,  this 
results  in  an  agent  release  fraction  of  1/9  due  to  detonation  and  8/9  as 
a  liquid  spill.  An  Irregular  array,  such  as  would  exist  after  the  first 
detonation,  could  result  in  a  larger  release  fraction  due  to  detona¬ 
tions.  Therefore,  it  is  assumed  that  25%  of  the  agent  release  is  due 
to  detonations  for  sequences  involving  fire  and  detonations. 

It  is  assumed  that  fires  involving  nonburstered  munitions  will 
always  be  fought.  However,  when  an  accident  involves  a  large  fire,  the 
first  priority  may  be  to  contain  the  fire  and  prevent  its  spreading  into 
unaffected  areas.  For  conservatism,  a  large  fire  involving  nonburstered 
munitions  was  treated  as  in  the  case  for  burstered  munitions,  l.e.,  all 
combustible  materials  involved  in  the  accident  are  consumed.  Whether 
burstered  or  nonburstered  munitions  are  involved,  large  fires  were 
assumed  to  be  confined  to  one  building  or  one  truck,  as  appropriate. 

Agent  that  is  burned  is  basically  destroyed,  but  the  destruction 
is  usually  incomplete.  A  previous  analysis  (Ref.  10-8)  indicated 
that  the  recovery  of  undecomposed  agent  from  fires  is  2.5%  for  GB  and 
0.2%  for  VX.  The  analysis  was  based  on  tests  at  Dugway  Proving  Ground 
(Refs.  10-9  and  10-10)  in  which  a  mock-up  igloo  with  11  pallets  of  rock¬ 
ets  containing  GB  was  allowed  to  burn  to  completion.  The  unburned  GB 
vapor  was  measured  by  a  grid  of  detectors  surrounding  the  fire  at  30  m 
distance  and  extending  30  m  high.  Actual  test  measurements  were  made 


for  GBt  and  the  results  for  VX  were  derived  by  extrapolation  based  on 
the  boiling  temperature,  thermal  decomposition  temperature  and 
volatility  of  VX  relative  to  GB. 

Although  the  above  references  provide  a  quantitative  data  point  on 
the  behavior  of  agent  in  a  large  fire  involving  an  igloo  or  a  transport 
vehicle,  there  are  several  reasons  to  increase  the  predicted  agent 
release  fraction  for  fires.  These  are: 

1.  The  analytical  procedure  for  detecting  agent  during  the 
test  yielded  small  quantities  of  agent  distributed  over  a 
large  number  of  detectors.  The  sauries  were  analyzed  by  the 
dianisidlne-peroxide  method.  The  sensitivity  of  these  mea¬ 
surements  is  expected  to  be  marginal  considering  the  short 
time  available  for  sampling  the  gas  cloud  as  it  passed  through 
the  detection  grid.  Therefore,  it  is  possible  that  a  signifi¬ 
cant  amount  of  agent  vapor  was  not  detected  during  the  test. 

2.  The  rockets  contain  a  large  amount  of  propellant,  which  in 
turn  contains  its  own  oxidizer.  The  propellant  burns  very 
quickly  and  tends  to  produce  a  hot  fire,  even  when  the  fire 
is  limited  by  the  amount  of  oxygen  present.  Fires  involving 
other  munitions  may  burn  slower  and  at  a  lower  temperature, 
idxlch  would  promote  a  higher  fraction  of  undestroyed  agent. 

3.  In  one  simulated  test  of  an  igloo  fire  (Ref.  10-10)  four  rock¬ 
ets  were  launched  out  of  the  igloo.  One  of  them  traveled 
1300  ft  away  from  the  igloo.  None  of  them  detonated  upon 
impact,  but  they  all  broke  open  and  spilled  agent  onto  the 
ground.  When  one  adds  the  liquid  spill  of  the  four  rockets 
that  escaped  from  the  igloo  to  the  2-1/22  agent  vapor  recov¬ 
ered,  the  total  agent  release  from  the  event  is  4.9Z. 


A.  The  analytical  extrapolation  to  determine  the  recovery  frac¬ 
tion  for  VX  Is  not  documented.  Further,  the  uncertainty  of  an 
extrapolation  In  a  cooq>lex  thermal-chemical  rate  process  Is 
considered  to  be  large.  Although  the  chemical  properties  of 
VX  and  GB  suggest  that  the  recovery  fraction  for  VX  should  be 
much  less  than  GB,  the  conclusion  that  the  recovery  of  VX 
would  be  6Z  times  the  recovery  of  GB  as  stated  In  Ref.  10-10 
Is  viewed  with  skepticism.  Therefore,  a  more  conservative 
value  of  25Z  was  assumed  for  the  recovery  factor  of  VX  versus 
GB.  Similarly,  the  chemical  properties  of  HD  suggest  that  an 
analytical  extrapolation  for  the  recovery  of  HD  would  also  be 
less  than  GB,  but  greater  than  VX.  Therefore,  a  value  of  50Z 
was  assumed  for  the  recovery  factor  of  HD  versus  GB. 

In  view  of  the  above  discussion,  the  release  fraction  for  unburned 
agent  GB  vapor  In  all  fire  scenarios  was  assumed  to  be  lOZ.  This  pro¬ 
vides  a  factor  of  two  over  the  A.9Z  condjlned  liquid  plus  vapor  measured 
In  the  test  to  allow  for  uncertainties  In  the  test  measurements  and 
uncertainties  In  the  liquid  agent  that  escapes  the  fire.  The  corres¬ 
ponding  release  fractions  for  HD  and  VX  are  assumed  to  be  5Z  and  2-1/2Z, 
respectively.  These  release  fractions  are  not  considered  as  over  con¬ 
servatism.  The  main  conservatism  arises  from  the  assumption  that  all 
the  agent  Inventory  Is  Involved  In  the  fire,  and  no  credit  Is  taken  for 
the  possibility  that  the  fire  might  be  extinguished  before  all  combusti¬ 
ble  materials  are  consumed. 

10.1.5.  Release  Duration 

The  accident  durations  assumed  for  this  risk  analysis  were  chosen 
to  conservatively  define  a  time  for  terminating  most  accidents  identi¬ 
fied  in  this  analysis.  In  the  sequences  involving  liquid  spills,  the 
accident  Is  terminated  when  the  decontamination  team  has  successfully 
terminated  evaporation  of  agent  vapor  Into  the  atmosphere.  Army  experi¬ 
ence  In  handling  and  moving  chemical  munitions  Indicates  that  may  of  the 


agent  spills  could  be  cleaned  up  much  quicker  than  the  times  assumed 
herein.  However,  since  many  accidents  are  rate  events  and  have  not 
occurred  In  the  Army  experience  to  date,  conservative  times  for  the 
accident  durations  have  been  applied.  ^ 

The  agent  release  for  an  evaporative  spill  Is  directly  proportional 
to  the  release  duration.  Therefore,  to  be  conservative,  the  release 
durations  were  estimated  on  the  high  side.  The  release  durations 
assumed  are: 

1.  For  agent  spills  occurring  during  handling  or  demilitarization 
operations  caused  by  human  or  equipment  malfunction,  the 
release  duration  was  assumed  to  be  1  h. 

2.  For  agent  spills  Involving  human  or  mechanical  error  during 
onsite  transportation.  It  was  assumed  that  the  accident  could 
not  be  terminated  as  quickly  as  the  above.  Therefore,  the 
release  duration  was  assumed  to  be  2  h. 

3.  For  agent  release  In  the  MDB  following  an  accidental  detona¬ 
tion  outside  the  ECR,  but  with  no  fire,  the  release  duration 
was  assumed  to  be  2  h. 

4.  For  agent  spills  arising  from  an  aircraft  crash  with  no  fire, 
the  release  duration  was  assumed  to  be  4  h. 


5.  For  severe  external  events,  e.g.,  earthquake,  tornado,  air¬ 
plane  crash,  the  evaporation  time  was  assumed  to  be  6  h. 

Table  10-1  lists  the  times  assumed  for  agent  release  for  the  acci¬ 
dent  scenarios  involving  fire  and/or  detonations.  Plant  operations 
accident  scenarios  are  not  Included  In  the  table  because  these  accidents 
arc  mitigated  by  engineered  safeguard  features  and  are  not  covered  by 
the  discussion  that  follows. 


1 
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TABLE  10-1 

AGENT  RELEASE  DURATION  FOR  ACCIDENTS  INVOLVING  FIRE  AND  DETONATION 


Event 

Agent  Release 
Duration 
(min) 

Type  of  Event 

Fire  only 

-  no  detonations 

10 

Handling  vehicle  collision 

60 

Aircraft  crash,  truck 
colllslon/overturn,  mete¬ 
orite  strike,  earthquake 

Fire  with 

detonation 

20 

Aircraft  crash,  truck 
collision,  earthquake 

60 

Meteorite  strike 

Detonations  only 


Instantaneous  Aircraft  crash 


The  approach  to  deriving  the  assumed  release  durations  was  to  group 
the  accident  scenarios  with  fire  or  detonations  Into  sets  with  similar 
characteristics,  then  estimate  a  release  time  ranging  from  10  min  to 
1  h.  For  accidents  Involving  a  large  fire.  It  was  assumed  that  all  of 
the  agent  present  ultimately  becomes  consumed  or  released  as  vapor.  The 
conservative  approach  for  these  cases  Is  to  assume  a  shorter  duration 
than  expected  because  a  given  release  to  the  atmosphere  Is  more  lethal 
when  distributed  over  a  shorter  time  Interval.  Factors  which  Influence 
the  choice  of  time  periods  are  discussed  below. 

There  are  three  possible  combinations  of  scenarios  Involving  fire 
and/or  detonations: 

1.  Detonations  only. 

2.  Fire  and  detonations. 

3.  Fire  only. 

10.1.5.1.  Detonations  Only.  The  scenarios  that  fall  Into  this  category 
Involve  a  high  velocity  Impact,  such  as  a  spurious  detonation  arising 
from  undue  forces  that  are  part  of  the  accident  scenario,  e.g.,  dropping 
a  pallet.  It  Is  known  that  the  detonations  do  not  propagate.  There¬ 
fore,  the  release  from  detonations  Is  assumed  to  occur  Instantaneously. 

10.1.5.2.  Fire  and  Detonations.  These  events  are  associated  with  stor¬ 
age  and  transportation  accidents.  For  some  events,  there  Is  a  source 
ofexternal  fuel,  e.g.,  fuel  from  a  truck.  In  these  scenarios,  the  deto¬ 
nations  are  propagated  by  the  fire,  and  concurrently  the  detonations 
allow  additional  munition  failures  that  further  fuel  the  fire.  The 
overall  result  Is  a  violent  conflagration.  The  total  duration  of  the 
accident  may  be  an  hour  or  more;  however,  for  conservatism,  the  duration 
of  the  agent  release  Is  assumed  to  be  20  min.  The  scenarios  not 
Included  In  the  20-mln  assumption  involve  a  meteorite  strike  Into  a 
storage  Igloo  or  Into  a  temporary  storage  area.  In  this  case,  there  Is 
no  source  of  external  fuel,  although  the  scenario  does  assume  that  fire 
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Is  Initiated,  and  detonations  are  propagated  by  the  lire  until  all 
combustible  materials  are  consumed.  Because  the  meteorite  lire  starts 
out  relatively  localized  and  without  external  luel,  the  release  duration 
lor  the  meteorite  strike  Is  assumed  to  be  1  h. 

10.1.5.3.  Fire  Only.  Events  Involving  lire  only  occur  In  some  han¬ 
dling,  storage,  and  transportation  accidents.  For  events  associated 
with  onsite  handling  the  amount  ol  agent  Involved  In  the  lire  Is  rela¬ 
tively  small.  The  exposed  agent  Is  allowed  to  burn  to  completion,  and 
the  release  duration  Is  assumed  to  be  10  min.  The  accidents  In  this 
group  associated  iflth  transportation  Involve  a  moderate  source  ol 
external  luel.  In  addition,  these  events  Involve  large  quantities  ol 
agent,  but  they  do  not  Involve  burstered  munitions.  Therelore,  these 
accidents  present  a  less  dllllcult  situation  to  control  than  the 
corresponding  case  when  burstered  munitions  are  present.  The  agent 
release  duration  lor  these  events  was  assumed  to  be  1  h. 


10.2.  APPLICATION  TO  ACCIDENT  SEQUENCES 


This  section  Illustrates  the  application  of  the  release  methodology 
to  determine  agent  releases  for  the  specific  accident  sequences  for  each 
phase  of  the  demilitarization  process.  It  is  not  intended  to  encompass 
all  sequences.  Appendix  I  presents  the  agent  releases  for  all 
sequences. 

10.2.1.  Handling 

The  procedure  for  analyzing  agent  releases  during  handling  acci¬ 
dents  was  to  first  group  the  accident  sequences  according  to  agent 
release  conditions  or  types  of  release.  For  example,  there  were  a 
number  of  sequences  resulting  in  liquid  spill  outdoors  (HC5,  HC7,  HCIO, 
HFl,  HF7 ,  and  HC8).  Table  10-2  shows  the  grouping  results  for  all 
handling  sequences.  There  were  the  following  types  of  releases  to  be 
assessed: 

1.  Single  munition  rupture  and  spill  outdoors. 

2.  Single  munition  rupture  and  evaporation  Indoors  (in  MDB,  MHI, 

LPF,  or  storage  igloo)  or  inside  the  package. 

3.  Burning  of  ruptured  single  munition  spill  outdoors. 

4.  Inq)act  detonation  of  single  munitions  Indoors. 

5.  Impact  detonation  and  spill  of  munitions  outdoors. 

6.  Impact  detonation  and  spill  of  munitions  Indoors. 

7.  Fire  and  thermal  detonation  of  munitions. 

The  agent  inventory  data  for  onsite  and  offsite  transport  con¬ 
tainers  is  summarized  in  Table  10-3.  Indoor  spills  are  assumed  to  be 
mitigated  ii/ithln  1  h,  so  that  evaporation  lasts  for  that  long.  Failure 
of  the  building  ventilation  system  is  a  part  of  the  definitions  of  these 


Type  of  Release 


Puncture /crash 
Liquid  spill 


Single  ^%lnlClons 
Falls 


Multiple  Munitions 


Outdoors 

H05,  H07, 

HFl, 

HF7 

None 

Evaporation 

In  MDB 

HF2,  HF8, 

HF9, 

HFIO 

None 

In  package 

HOI A,  HFA 

None 

In  storage  Igloo 

HOI,  H03, 

HOA 

None 

Burning  of  agent  spill 

Outdoors 

H02,  H06, 

HF3 

None 

Impact  detonation  and 
spill  (If  more  than  one) 
(no  fire) 

Outdoors 


H022,  H024,  HFll, 
HF14 


Indoors 


Fire  and  thermal 
detonation 


HOll,  H012,  HF13 
H026,  HF5 


t®)lnvolves  Inventory  of  one  pallet. 

(b)outdoor  spill  release  given  In  pounds  of  liquid,  evaporation 
calculated  by  Mitre. 
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INVENTORY 

TABLE  10-3 

DATA  FOR  ONSITE  TRANSPORT 

CONTAINERS 

Munition /Agent 

Munition  Inventory 

No.  Munitions 

Type 

(lb) 

Per  Pallet  or  ONC 

Bomb 

GB 

220.0 

2 

Mortar 

H 

6.0 

48 

105  cartridge 

GB 

1.6 

24 

H 

3.2 

24 

Ton  container 

GB 

1500.0 

1 

H 

1700.0 

1 

VX 

1600.0 

1 

Mine 

VX 

10.5 

36 

155  projectile 

GB 

6.5 

8 

H 

11.7 

8 

VX 

6.0 

8 

8-ln.  projectile 

GB 

14.5 

6 

VX 

14.5 

6 

Rocket 

GB 

10.7 

15 

VX 

10.0 

15 

Spray  tank 

VX 

1356.0 

1 
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sequences.  The  results  for  each  of  the  above  types  of  releases  are 
summarized  In  Table  10- A. 

10.2.2.  Warehouse  Storage  Release  During  Earthquakes 

There  are  three  sites  with  stored,  nonburstered  munitions  In  ware¬ 
houses.  These  aret 

1.  UMDA  -  ton  containers  with  agent  HD  stored  In  two  warehouses. 

2.  NAAP  -  ton  containers  with  agent  VX  stored  in  one  warehouse. 

3.  TEAD  -  spray  tanks  with  agent  VX  stored  In  two  warehouses. 

Only  spray  tanks  and  ton  containers  are  stored  In  warehouses,  none 
of  which  contain  agent  GB.  Based  on  their  Intact  characteristics,  the 
ton  containers  are  predicted  to  be  able  to  be  crushed  or  breached  by  the 
kinetic  energy  of  a  falling  I-beam  If  the  warehouse  structure  Is  dam¬ 
aged.  Each  I-beam  has  sufficient  energy  to  crush  one  ton  container  but 
not  two.  Thus,  the  maximum  number  of  ton  containers  crushed  per  ware¬ 
house  Is  five,  since  there  are  that  many  I-beams  In  the  warehouse  roof. 
For  similar  reasons,  the  maximum  number  punctured  Is  taken  to  be  five 
per  warehouse. 

Spray  tanks  are  stored  In  overpacks  and,  based  on  structural 
calculations,  are  not  expected  to  be  breached  by  the  falling  I-beams. 
Consequently,  the  mechanical  breaching  of  spray  tanks  due  to  an  earth¬ 
quake  Is  not  considered  a  credible  event.  If  a  fire  lasts  beyond 
30  min,  spray  tanks  may  fall  due  to  the  unsuppressed  fire.  Thus,  for 
spray  tanks,  only  one  type  of  release  Is  considered,  namely  burning  of 
one  or  two  warehouse  Inventories  due  to  fire  beyond  30  min.  The  release 
fraction  due  to  unburnt  VX  agent  in  this  case  Is  2.5X,  as  In  other  acci¬ 
dent  scenarios. 
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For  ton  containers,  three  release  types  were  considered: 

1.  Evaporation  of  agent  spilled  due  to  mechanical  breach  of  one 
to  five  containers  per  warehouse. 

2.  Burning  of  agent  spilled  from  breached  containers. 

3.  Burning  of  the  entire  Inventory  In  the  warehouse,  starting  at 
30  min. 

The  evaporative  release  rate  Is  not  limited  by  the  floor  area, 
which  Is  tens  of  thousands  of  square  feet  per  warehouse.  Thus,  the 
evaporative  release  rate,  m^^.  Is  given  by  Eq.  10-2.  For  10-ton  con¬ 
tainers  with  agent  HD,  M  -  17,000  lb  and  a  n  451  and  b  R>0.1.  Thus, 
m^Y  >  0.85  Ib/h  for  10  containers.  This  rate  of  HD  release  Is  negligi¬ 
ble.  Therefore,  evaporative  release  of  spilled  HD  from  breached  muni¬ 
tions  Is  negligible.  For  agent  VX,  the  maximum  number  of  breached  ton 
containers  Is  five.  In  this  limiting  case,  M  »  8000  lb  and  a  «  49,000, 
b  n  0.12.  Thus,  m^y  ■  0.003  Ib/h  for  five  breached  containers.  This 
rate  of  release  Is  negligible. 

The  second  and  third  types  of  releases  Involve  burning  of  spilled 
agent  from  breached  containers  or  burning  of  all  ton  containers  due  to  a 
lack  of  fire  suppression.  For  these  cases,  the  release  consists  of  the 
product  of  the  appropriate  Inventory  and  the  fire  release  fraction,  F. 
Here,  F  ■  0.025  for  agent  VX  and  F  »  0.05  for  agent  HD,  consistent  with 
data  described  above.  No  credit  Is  taken  for  agent  vapor  retention  by 
the  warehouse  building,  even  if  It  is  not  structurally  damaged  by  the 
earthquake,  because  It  Is  not  designed  with  a  containment  function. 

As  described  In  Section  5,  an  event  tree  was  analyzed  for  the  stor¬ 
age  of  ton  containers  at  the  UMDA  and  NAAP  site  warehouses.  For  the 
UMDA  site,  there  were  17  release  sequences  with  frequencies  above 
10-10/yr.  Table  10-5  lists  these  sequences  along  with  the  information 


TABLE  10-5 

AGENT  HD  RELEASES  FROM  TON  CONTAINERS  STORED  IN 
UMDA  WAREHOUSES  DURING  EARTHQUAKES ( ® ) 


Sequence 

ID 

No.  of 
Munitions 
Damaged 

Spilled  Munition 
Agent  Burns 

No.  Warehouses 

In  Which  Entire 
Inventory  Burns 

Release 

To  Atmopshere 
(lb) 

SLKHF281 

0 

— 

1 

2.7  X  105 

SLKHF282 

0 

— 

2 

5. A  X  105 

SLKHC283 

1-5 

No 

0 

e(b) 

SLKHF28A 

1-5 

Yes 

1 

2.7  X  105 

SLKHF285 

1-5 

No 

1 

2.7  X  105 

SLKHF286 

1-5 

Yes 

2 

5. A  X  105 

SLKHC287 

2-10 

No 

0 

C 

SLKHF288 

2-10 

Yes 

1 

2.7  X  105 

SLKHF289 

2-10 

Yes 

2 

5. A  X  10^ 

SLKHC2810 

1-5 

No 

0 

e 

SLKHF2811 

1-5 

Yes 

1 

2.7  X  105 

SLKHF2812 

1-5 

Yes 

2 

5. A  X  105 

SLKHC2813 

2-10 

No 

0 

e 

SLKHF281A 

2-10 

Yes 

1 

2.7  X  105 

SLKHF2815 

2-10 

Yes 

2 

5. A  X  105 

SLKHC2816 

2-10 

No 

0 

e 

SLKHF2817 

2-10 

Yes 

2 

5. A  X  105 

Agent  Inventory  ■  5.A  x  10®  lb  per  warehouse,  assuming  warehouse 
Is  full. 


*  negligible  (below  lA  lb). 


pertinent  to  the  release  calculations.  For  sequences  In  which  the 
burning  or  agent  spilled  from  breached  munitions  Is  the  only  release 
mode,  a  range  of  release  Is  given  corresponding  to  the  range  of  con¬ 
tainers  breached  (1  to  5  or  2  to  10).  For  sequences  In  which  the  non- 
suppressed  fire  Ignites  the  entire  warehouse  Inventory,  the  number  of 
breached  containers  Is  unliiq>ortant. 

Table  10-6  presents  the  corresponding  release  results  for  ton 
containers  stored  at  the  NAAP  site.  Only  five  sequences  are  important 
since  there  Is  only  one  warehouse  at  the  site.  The  maximum  masses  of 
agent  VX  released  from  this  site  are  seven  times  lower  than  maximum  mass 
releases  of  agent  HD  from  UMDA. 


In  the  event  tree  for  spray  tanks  stored  at  the  TEAD  site,  there 


were  six  significant  sequences  as  given  In  Table  10-7.  Since  no  spray 
tanks  are  mechanically  breached,  the  only  consequence  variable  Is 
whether  the  unsuppressed  fire  Is  not  suppressed  In  one  or  both  ware¬ 
houses.  The  releases  upon  burning  of  the  entire . Inventory  at  one  or 
both  warehouses  are  given  In  Table  10-7.  They  are  8  to  16  times  lower 
than  the  maximum  release  of  the  same  agent  (VX)  from  the  NAAP  site. 


10.2.3.1.  Internal  Events.  The  analysis  of  agent  release  due  to 
In-plant  accidents  used  the  same  calculation  models  discussed  above  when 
applicable.  However,  many  plant  operations  involve  accidents  which 
occur  after  the  munition  has  been  punched  and  drained.  The  agent 
releases  for  these  events  are  not  dependent  on  the  munition  failure 


TABLE  10-6 

AGENT  VX  RELEASES  FROM  NAAP  WAREHOUSE  TON 
CONTAINERS  DURING  EARTHQUAKES (» ) 


Sequence 

ID 

No.  o£ 
Munitions 
Damaged 

Spilled  Munition 
Agent  Burns 

Entire  Warehouse 
Inventory  Burns 

Release 

To  Atmosphere 
(lb) 

SLKVF261 

0 

-- 

Yes 

7.5  X  10^ 

SLKVC262 

1-5 

No 

No 

e(b) 

SLKVF263 

1-5 

Yes 

Yes 

7.5  X  10^ 

SLKVC26A 

1-5 

No 

No 

e 

SLKVF265 

1-5 

Yes 

Yes 

7.5  X  10^ 

TABLE  10-7 

AGENT  VX  RELEASE  FROM  SPRAY  TANKS  STORED  AT 
TEAD  WAREHOUSES  DURING  EARTHQUAKES C a) 


Sequence 

ID 

No.  Warehouses 

In  Which  Entire 
Inventory  Burns 

Release 

To  Atmosphere 
(lb) 

SLSVF271 

1 

A. 5  X 

103 

SLSVF272 

2 

9.0  X 

103 

SLSVF273 

1 

A. 5  X 

103 

SLSVF27A 

2 

9.0  X 

103 

SLSVF275 

1 

A. 5  X 

103 

SLSVF276 

2 

9.0  X 

103 

(a)Agent  inventory  =  1.79  x  10^  lb  of  VX, 


assuming  warehouse  Is  full. 


models  discussed  above.  The  bases  for  agent  releases  for  these  events 
are  as  follows: 


1.  The  evaporation  rate  for  an  Indoor  spill  v&s  calculated  using 
the  D2PC  coisputer  code  (Ref.  10-1).  Allowable  surface  area 
for  evaporation  was  also  calculated  by  D2PC  for  the  first 

10  min  of  the  accident. 

2.  The  munition  Inventory  In  the  MHI  Is  16  packages. 

3.  The  munition  Inventory  In  the  UPA  Is  six  packages. 

4.  The  maximum  agent  Inventory  In  the  TOX  and  piping  Is  500  gal 
In  the  collection  tank,  28  gal  In  the  piping.  This  Inventory 
Is  assumed  to  be  present  at  the  time  of  the  accident. 


10.2.3.2.  Earthquake  At  MDB. 


Burstered  Munitions  Release 


There  are  two  locations  In  the  MDB  where  agent  Is  present:  the 
unpack  area  (UPA)  and  the  TOX  cubicle.  The  event  trees  for  burstered 
munitions  consider  the  potential  scenarios  leading  to  damage  and  agent 
release  for  one  or  more  munitions  In  the  UPA,  damage  and  agent  release 
of  the  TOX,  or  both.  For  the  various  seismic  Intensities,  there  were 
four  sequences  with  significant  frequencies  of  obtaining  damage  and 
release,  all  Involving  fire  In  the  MDB.  For  convenience  these  are 
summarized  as  follows: 


Sequence 

Earthquake 
Falls  MDB 

Munition 

Puncture 

TOX 

Fire 

Suppressed 

P033 

No 

Not  relevant 

Intact 

No 

P025 

Yes 

Yes 

Intact 

Yes 

P026 

Yes 

Yes 

Intact 

No 

P029 

Yes 

No 

Intact 

No 

Damage  or  failure  of  the  MDB  by  the  MDB  by  the  earthquake  Is  lnq>or- 
tant  since  It  allows  release  to  atmosphere  of  any  agent  spill  starting 
from  time  zero.  Later,  the  MDB  can  fall  due  to  nonsuppression  of  the 
fire.  Other  liiq>ortant  Intermediate  events  Involve  mechanical  puncture 
and  spill  of  a  single  munition  during  processing.  Other  munition  fail¬ 
ure  modes  such  as  early  detonation  of  a  single  processed  munition  or 
puncture  of  a  packed  munition  are  screened  out  on  the  basis  of  low 
probability.  Failure  of  the  TOX,  resulting  In  spill  of  the  TOX  agent 
Inventory,  due  to  the  earthquake  also  Is  screened  out  on  the  basis  of 
low  probability.  Both  the  mechanical  failure  mode  for  the  TOX  and  the 
thermal  failure  of  the  TOX  and  piping  Is  low  probability.  If  the  fire 
Is  not  suppressed.  It  has  the  potential  for  falling  the  munitions  In  the 
UFA  (entire  Inventory  considered). 

The  above  four  sequences  Involve  one  or  more  combinations  of  two 
t3rpes  of  releases: 

Sequences  P026,  P029,  and  P033  -  Flre/detonatlon  Involving  entire 

OPA  Inventory. 

Sequence  P025  -  Evaporation  release  of  one  muni¬ 

tion  Inventory,  or  a  burn  release 
of  one  munition  Inventory. 

The  algorithms  for  calculating  each  of  these  types  of  release  are 
described  below. 

For  the  first  type,  the  agent  inventory  in  the  UPA  Is  six  packages 
containing  one  munitions  pallet  per  package.  Thus,  the  total  Inventory 
Is  the  Inventory  of  a  single  munition,  B  (in  pounds  of  agent),  times  the 
number  of  munitions  per  pallet,  C,  times  six.  Thus, 


UPA  Inventory  >■  6  x  B  x  C 


(10-3) 


Table  10-3  presents  values  o£  the  single  munitions  inventory  B  and  the 
total  UFA  Inventory  for  the  various  burstered  munitions. 

The  flre/detonatlon  release  is  calculated  by  the  equation, 

Flre/detonatlon  release  >  (UFA)  Inventory)  (0.25 

+  (0.75  F)  ,  (10-4) 

where  F  Is  the  release  fraction  due  to  lnconq>lete  burning.  Here, 

0.10  for  agent  GB 

F  »  0.05  for  agent  H  .  (10-5) 

0.025  for  agent  VX 

These  values  represent  the  estimated  unburned  vapor  release  during  a 
fire.  Consistent  with  other  Initiating  events,  0.25  Is  taken  to  be  the 
release  due  to  detonation  of  some  of  the  bursters  and  spraying  of  agent. 
The  fire  release  fraction  Is  applied  to  the  remaining  75Z  of  the 
Inventory. 

The  other  type  of  release  consists  of  Indoor  evaporation  or  burning 
of  spilled  agent  from  one  munition  released  directly  to  the  atmosphere 
(failed  MDB).  The  burn  release  Is  singly  the  munition  Inventory  times 
the  fire  release  fraction,  F.  The  computer  code  D2FC  Is  used  to  calcu¬ 
late  the  evaporative  release.  Values  for  the  evaporative  releases  are 
presented  In  Table  10-8  for  the  various  burstered  munitions.  Only  agent 
GB  evaporative  released  Is  significant  since  the  releases  for  other 
agents  are  below  threshold  values  for  significant  offsite  consequences. 
These  threshold  values  are  0.4  lb  for  agent  GB,  0.3  lb  for  VX,  and  14  lb 
for  HD. 

The  evaporative  releases  are  based  on  application  of  the  evapora¬ 
tion  data  for  a  6-h  time  period.  This  Is  the  time  estimated  for  mitiga¬ 
tion  or  cleanup  of  the  spill.  For  single  burstered  munition  Inventor¬ 
ies,  the  1/32-ln.  spill  area  Is  less  than  the  UFA  floor  area.  Since  the 
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floor  area  slopes  to  two  2  x  2  x  2  ft  sumps,  the  following  procedure  Is 
used. 

Initially,  the  spill  is  assumed  to  wet  the  sloped  floor  area. 

Thus,  the  above  equation  is  applied,  without  modifications  due  to  any 
area  restriction,  for  a  selected  10-min  time  period.  After  that,  the 
liquid  is  assumed  to  run  down  the  shallow  slope  to  one  of  the  sumps, 
which  is  large  enough  to  contain  the  entire  burstered  munition  volume. 
Between  10  min  and  an  estimated  accident  mitigation  time  of  6  h,  the 
evaporation  occurs  at  a  rate  dictated  by  the  suii^>  area  of  4  ft^.  This 
rate  is  essentially  that  given  by  Eq.  10-2  with  M  corresponding  to  the 
mass  of  liquid  in  a  1/32-ln.  layer  of  the  sump  pool,  rather  than  the 
entire  munition  Inventory.  The  evaporative  releases  between  0  and 
10  min  and  10  min  and  6  h  are  summed  to  get  the  total  evaporation 
release. 

Since  it  is  not  known  from  the  event  tree  analysis  whether  the  fire 
engulfs  the  sump,  the  approach  in  this  analysis  is  to  take  the  maximum 
of  the  fire  release  and  the  evaporative  release.  Table  10-8  shows  these 
releases.  Generally,  the  fire  release  dominates. 

Table  10-8  presents  the  calculated  releases  for  the  significant 
accident  sequences . 

In  sequence  P033,  the  building  remains  Intact  from  the  earthquake, 
so  no  release  occurs  for  the  initial  10  min,  regardless  of  whether  a 
single  munition  spill  occurs  or  not.  The  ensuing  fire  is  not  suppressed 
and  the  UPA  Inventory  is  Ignited  at  10  min,  resulting  in  a  fire/ 
detonation  release. 

In  sequence  P025,  the  MDB  is  damaged,  so  that  the  agent  spill  from 
the  single  munition  puncture  is  released  to  atmosphere.  The  fire  is 
suppressed  before  additional  munitions  are  involved.  Thus,  the  release 


consists  of  evaporation  if  the  fire  area  is  not  coincident  with  the 
spill  area  or  a  burn  release  if  the  fire  burns  the  spilled  agent. 

In  sequences  P026  and  P029t  the  release  during  the  initial  10  min 
is  small  (the  same  as  the  sequence  P025).  But  since  the  fire  is  not 
suppressed,  the  UPA  Inventory  is  Ignited  and  the  total  release  becomes 
the  (same  as  sequence  P033). 

Table  10-8  shows  that  significantly  large  releases  (75  to  610  lb) 
occur  for  sequences  P033,  P026,  and  P029.  Releases  for  sequence  P025 
are  small. 

Nonburstered  Munitions  Release 

The  event  tree  for  nonburstered  munitions  contains  three  sequences 
with  frequencies  above  the  screening  threshold  of  10"^®  per  year.  All 
of  these  Involve  earthquake- Induced  damage  to  the  MDB  and  fire.  They 
are  as  follows: 

Sequence  Munition  Puncture  TOX  Fire  Suppressed 


P025 

Yes 

Intact 

Yes 

P026 

Yes 

Intact 

No 

P029 

No 

Intact 

No 

These  sequences  Involve  the  same  types  of  releases  as  for  the 
burstered  munitions  with  one  exception.  Nonsuppressed  fire  (lasting 
more  than  10  min)  for  burstered  munitions  in  the  UPA  Involves  both  deto¬ 
nation  and  fire,  while  only  fire  is  Involved  for  nonburstered  munitions. 
Also,  the  ignition  time  is  30  min  for  nonburstered  munitions.  Thus,  the 
release  algorithm  is  changed  to: 


UPA  release  =  (UPA  Inventory)  x  F 


(10-6) 


The  evaporation  algorithm  Is  similar  for  burstered  and  nonburstered 
munitions.  Inventory  algorithms  are  the  same. 


Table  10-8  presents  the  Inventories  of  agents  In  nonburstered  muni¬ 
tions  or  In  the  TOX.  The  larger  Inventory  (over  10^  lb)  of  the  non¬ 
burstered  munitions  causes  some  special  considerations  for  a  puncture 
release.  A  puncture  Is  Interpreted  to  consist  of  a  1.5-ln.  diameter 
hole.  The  agent  flow  rate  out  the  hole  Is  approximately  100  Ib/mln, 
which  means  that  the  entire  munition  Inventory  spills  out  In  about 
1/A  h.  In  the  UFA,  the  spill  Is  limited  to  2140  ft^  of  floor  area  dur¬ 
ing  the  Initial  10  min  before  the  liquid  flows  to  the  sump,  when  379  lb 
of  agent  spills  Into  this  area,  a  critical  pool  thickness  Is  reached, 
namely  1/32  In.,  and  the  evaporation  rate  levels  off.  After  10  min,  the 
sump  will  be  overflowed  for  certain  munitions.  The  pool  area  Is  calcu¬ 
lated  based  on  a  slope  of  1/4  In.  for  each  foot  of  floor  space  and  the 
evaporation  rate  Is  adjusted  for  that  area. 

Results  of  the  Inventory  and  release  calculations  for  nonburstered 
munitions  are  summarized  In  Table  10-8.  The  effect  of  fire  In  the  UFA 
Is  found  to  be  most  Important. 

10.2.4.  Transport  Releases 

For  onsite  truck  transport,  each  truck  will  carry  up  to  four  ONCs. 
The  agent  Inventory  of  each  ONC  Is  summarized  In  Table  10-3  for  the 
various  munitions. 

Table  10-9  presents  the  truck  accident  release  calculations.  Those 
sequences  vdiere  no  release  values  are  given  were  screened  out  on  the 
basis  of  low  frequency.  Note  that  detonation  releases  occur  only  where 
burstered  munitions  are  Involved.  The  only  significant  release  sequence 
Is  V007 ,  Involving  aircraft  crash,  mechanical  rupture,  and  evaporation. 


TABLE  10-9 

RESULTS  OF  ONSITE  TRANSPORT  RELEASE  ANALYSIS 


Scenario 

Agent 

Available 

Spilled 

(lb) 

Destroyed 

(lb) 

Vapor 

(lb) 

Detonated 

(lb) 

Duration 

Time 

VOKHSOOl 

3A00 

VOPGSOOl 

760 

-- 

-- 

-- 

-- 

VOPHSOOl 

lAOA 

-- 

-- 

-- 

__ 

-- 

VOPVSOOl 

756 

— 

-- 

-- 

-- 

-- 

VOQGSOOl 

870 

— 

-- 

-- 

-- 

VORGSOOl 

6A5 

-- 

-- 

-- 

-- 

VORVSOOl 

612 

— 

— 

— 

— 

-- 

V0KHS002 

3A00 

.  * 

«  * 

_  . 

VOPGS002 

760 

-- 

-- 

-- 

.. 

-- 

V0PHS002 

lAOA 

-- 

-- 

-- 

-- 

-- 

VOPVS002 

756 

-- 

— 

-- 

-- 

-- 

V0QGS002 

870 

-- 

— 

-- 

-- 

-- 

VORGS002 

6A5 

-- 

-- 

-- 

-- 

-- 

V0RVS002 

612 

-- 

— 

-- 

-- 

-- 

VOKHS003 

3A00 

1700.0 

«•  m. 

•» 

«»  m, 

2  h 

VOPGS003 

760 

6.5 

.. 

2  h 

VOPHS003 

lAOA 

11.7 

-- 

-- 

2  h 

VOPVS003 

756 

6.3 

-- 

-- 

2  h 

V0QGS003 

870 

1A.5 

-- 

2  h 

VORGS003 

6A5 

10.75 

.. 

2  h 

V0RVS003 

612 

10.2 

— 

-- 

-- 

2  h 

VOPGCOOA 

760 

VOPHCOOA 

lAOA 

-- 

-- 

VOPVCOOA 

756 

-- 

_ 

•  • 

VOQGCOOA 

870 

-- 

-- 

-- 

-- 

VORGCOOA 

6A5 

-- 

A35-37 

A8.3 

161.25 

20  min 

VORVCOOA 

612 

-- 

4A7.5 

11.5 

153.0 

20  min 

VOKHF005 

3A00 

-- 

-- 

-- 

-- 

-- 

V0KHS006 

3A00 

3A00.0 

Instant 

VOPGC006 

760 

532.0 

-- 

-- 

llA.O 

Instant 

VOPHC006 

lAOA 

982.8 

-- 

210.6 

Instant 

VOPVC006 

756 

529.2 

-- 

-- 

113. A 

Instant 

VOQGC006 

870 

609.0 

-- 

-- 

130.5 

Instant 

VORGC006 

6A5 

A51.5 

-- 

96.75 

Instant 

VORVC006 

612 

A28.A 

.. 

-- 

91.8 

Instant 

TABLE  10-9  (Continued) 


Agent 

Spilled 

Destroyed 

Vapor 

Detonated 

Duration 

Scenario  Avallable(^) 

(lb) 

(lb) 

(lb) 

(lb) 

Time 

VOKHF007 

VOPGC007 

VOPHC007 

V0PVC007 

VOQGC007 

VORGC007 

V0RVC007 


3230.0 

513.0 

1000.3 

552.8 

587.2 

435.37 

447.5 


170.0 

57.0 

52.7 

14.2 

65.3 

48.3 
11.5 


190.0 

351.0 

189.0 

217.5 

161.25 

153.0 


20  min 
20  min 
20  min 
20  min 
20  min 
20  min 
20  min 


VOKHS009 

VOPGS009 

VOPHS009 

VOPVS009 

VOQGS009 

VORGS009 

VORVS009 


VOKHSOlO 

VOPGSOlO 

VOPHSOlO 

VOPVSOlO 

VOCiGSOlO 

VORGSOlO 

VORVSOlO 


VOKHSOll 

VOPGSOll 

VOPHSOll 

VOPVSOll 

VOQGSOll 

VORGSOll 

VORVSOll 


1700.0 

6.5 

11,7 

6,3 

14.5 

10.75 

10.2 


V0PGC012 

VOPHC012 

V0PVC012 

V0QGC012 

VORGC012 

V0RVC012 


513.0 

57.0 

190.0 

20  min 

1000.3 

52.7 

351.0 

20  min 

552.8 

14.2 

189.0 

20  min 

587.2 

65.3 

217.5 

20  min 

435.4 

48.4 

161.3 

20  min 

447.5 

11.5 

153.0 

20  min 

V0KHF013 


3315.0 


85.0 


TABLE  10-9  (Continued) 


Scenario 

Agent 

Avallable(^) 

Spilled 

(lb) 

Destroyed 

(lb) 

Vapor 

(lb) 

Detonated 

(lb) 

Duration 

Time 

VOKHSOIA 

3400 

1700.0 

2  h 

VOPGSOIA 

760 

6.5 

.. 

-- 

2  h 

VOPHSOIA 

1404 

11.5 

-- 

-- 

— 

2  h 

V0PVS014 

756 

6.3 

-- 

-- 

-- 

2  h 

V0QGS014 

870 

14.5 

— 

-- 

-- 

2  h 

V0RGS014 

645 

10.75 

— 

-- 

— 

2  h 

VORVS014 

612 

10.2 

— 

— 

— 

2  h 

VOPGS015 

760 

32.5 

6.5 

Instant 

VOPHS015 

1404 

58.5 

-- 

-- 

11.7 

Instant 

V0PVC015 

756 

31.5 

— 

-- 

6.3 

Instant 

V0QGC015 

870 

72.5 

-- 

14.5 

Instant 

VORGC015 

645 

623.5 

— 

-- 

21.5 

Instant 

V0RVC015 

612 

591.6 

-- 

-- 

20.4 

Instant 

(*)Froni  Table  1-2,  "Transportation  of  Chemical  Agents  and  Muni¬ 
tions:  A  Concept  Plan,"  U.S.  Arn^,  June  30,  1987. 


10.2.5.  Dncertalntles 

No  uncertainty  analysis  was  performed  for  the  agent  release  anal¬ 
ysis.  The  releases  reported  are  treated  as  conservative  estimates, 
rather  than  central  estimates,  since  they  are  based  on  assumptions  which 
are  often  conservative.  Examples  are:  (1)  use  of  early  thresholds  of 
munition  failure  relative  to  the  data  (Appendix  F) ,  (2)  worst-case  num¬ 
ber  of  adjacent  munition  ruptures  for  a  munition  detonation  In  a  pallet, 
(3)  use  of  maximum  rather  than  average  inventories,  and  (4)  upper  bound 
fire  release  factors,  relative  to  the  data. 
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11.  RESULTS 


The  analysis  of  the  potential  for  agent  release  to  the  atmosphere 
from  accident  scenarios  related  to  the  onsite  disposal  option  Included 
the  following  major  activities;  (1)  storage,  (2)  handling  activities 
associated  with  the  transport  of  munitions,  (3)  onsite  transportation, 
and  (A)  plant  operations  associated  with  the  demilitarization  of 
munitions.  This  section  discusses  some  of  the  accident  probability  and 
agent  release  results  associated  with  these  activities. 

The  results  of  the  analysis  of  the  various  activities  encompassing 
the  onsite  disposal  option  cannot  be  presented  In  the  same  units,  l.e., 
annual  frequencies,  because  of  the  possible  dlvulgence  of  classified 
Information.  This  Is  only  possible  for  some  storage  and  plant  operation 
accident  scenarios.  For  accident  scenarios  related  to  the  handling 
activities  at  the  different  sites,  the  unclassified  portion  of  the 
probabilistic  analysis  is  given  in  terms  of  frequency  of  accidents  per 
pallet  of  munitions  (or  as  a  container  of  munitions).  For  onsite 
transportation  accidents,  the  basic  results  are  reported  In  terms  of 
accident  frequency  per  vehicle  mile.  These  probablllties/unlt  are  then 
multiplied  by  the  number  of  handling  operations  or  vehicle  miles 
traveled  during  the  stockpile  disposal  program. 

The  evaluation  of  the  actual  risk  to  the  public  and  environment 
requires  agent  dispersion  calculations  which  are  not  in  the  scope  of  the 
study  reported  here.  De/plte  this  limitation,  the  results  discussed 

herein  still  provide  useful  insights  on  the  contributions  of  the  various 
disposal  activities  to  the  risk  of  an  agent  release.  These  insights  are 
discussed  below. 


11.1.  ACCIDENT  SCENARIOS  DURING  STORAGE 


11.1.1.  Internal  Events 

There  were  no  significant  Internal  event  initiators  of  accidents 
during  storage  at  the  disposal  site  before  movement  to  the  demilitariza¬ 
tion  facility.  Per  unit  operation,  forklift  drop  accidents  occur  more 
frequently  than  forklift  tine  punctures.  Also,  the  use  of  a  lifting 
beam  instead  of  a  tine  leads  to  an  order  of  magnitude  decrease  in  drop 
frequency. 

11.1.2.  External  Events 

These  events  involve  accidents  caused  by  natural,  phenomena  or  human 
activity  affecting  munitions  in  storage  igloos,  open  storage  areas, 
holding  areas,  or  warehouses.  If  these  are  assumed  to  be  full  of  muni¬ 
tions,  the  agent  inventories  range  up  to  100,  1000,  and  2000  tons, 
respectively,  for  storage  igloos,  open  areas,  and  warehouses.  The  most 
frequent  external  accidents  having  significant  release  involve  mild 
intensity  earthquakes  or  small  airplane  crashes  (order  depending  on 
site).  Amounts  of  available  agent  inventories  released  in  these  events 
are  on  the  order  of  fractions  of  one  percent  or  less  (munition 
punctures,  drops,  etc.). 

The  largest  releases  occur  for  a  large  aircraft  crash,  a  meteorite 
strike,  or  a  severe  earthquake,  especially  when  a  warehouse  (at  NAAP, 
TEAD,  or  UMDA)  is  Involved.  These  can  result  in  up  to  10  percent  of 
the  agent  Inventory  released  for  scenarios  involving  a  fire  which  has 
the  potential  (duration)  for  destroying  the  entire  Inventory  of  an  igloo 
or  warehouse.  The  munitions  stored  in  warehouses  contain  only  VX  or 
mustard  which  have  much  slower  evaporation  rates  than  GB  and  hence  are 
not  easily  dispersed  into  the  atmosphere.  Thus,  warehouse  scenarios 
involving  only  spills  are  not  significant  risk  contributors.  The  ware¬ 
house  at  UMDA  has  the  potential  for  the  largest  release.  Meteorite 


strike-initiated  sequence  median  frequencies  are  one  to  tvro  orders  of 
magnitude  lower  than  the  aircraft  crash- Induced  sequence  frequencies. 

As  expected,  munitions  stored  outdoors  are  generally  more  susceptible  to 
large  aircraft  crashes  than  those  stored  In  warehouses  or  Igloos,  but 
releases  are  lower.  Both  APG  and  PBA  have  ton  containers  stored  out¬ 
doors,  and  the  aircraft  crash  probabilities  at  these  sites  are  somevdiat 
higher  than  at  the  other  sites.  Igloos  appear  to  provide  only  minimal 
protection  from  direct  crashes  of  large  planes,  but  releases  are  an 
order  of  magnitude  lower.  The  releases  are  more  severe  if  burstered 
munitions  are  involved. 


11.2.  ACCIDENT  SCENARIOS  DURING  HANDLING 


Included  in  the  handling  analysis  are  (1)  single  munition  or  pallet 
movements  by  hand,  £orkll£t,  or  other  equipment;  (2)  packing  or  unpack¬ 
ing  pallets  Into  transportation  containers;  and  (3)  loading  and  unload¬ 
ing  packages  £rom  trucks. 

The  results  Indicate  that  dropped  munitions,  whether  In  palletized 
£orm  or  not,  occur  more  £requently  than  either  £orkll£t  tine  puncture  or 
£orkll£t  collision  accidents.  In  £act,  the  £requency  o£  £orkll£t  colli¬ 
sion  accidents  which  lead  to  the  munitions  £alllng  o££  the  £orkll£t  Is 
an  order  of  magnitude  lower  than  the  drop  accidents.  Furthermore,  the 
type  o£  clothing  an  operator  Is  wearing  tdille  handling  these  munitions 
ln£luence  the  drop  £requency  value.  An  operator  wearing  Level  A  cloth¬ 
ing  Is  more  likely  to  commit  an  error  that  would  cause  the  munition  to 
be  dropped  than  when  he  Is  wearing  more  comfortable  clothing. 

The  results  also  Indicate  that  spray  tanks  (in  overpacks)  have 
relatively  higher  drop  frequencies  than  other  munitions.  This  Is 
largely  due  to  the  assumption  that  spray  tanks  will  be  lifted  and  moved 
to  the  truck  (for  loading  or  unloading)  using  forklift  with  tines.  The 
drop  frequency  using  the  tines  Is  an  order  of  magnitude  higher  than  with 
the  use  of  lifting  beams. 

For  bare  munitions,  the  rockets  seem  to  be  the  most  prone  to  punc¬ 
tures  from  drops  or  forklift  tine  accidents.  However,  the  onsite 
transport  container  (ONC)  Itself  also  affects  the  puncture  probability. 
However,  bare  munitions  have  higher  puncture  probabilities  than  muni¬ 
tions  In  ONCs.  This  observation  Is  of  course  not  quite  evident  In  the 
final  results  presented  because  there  are  more  handling  operations 
Involving  possible  drops  of  ONCs  than  bare  munitions. 

Bulk  Items  that  are  punctured  lead  to  larger  releases  than  other 
munitions  such  as  projectiles  or  rockets.  Bombs  are  of  concern  because 


they  contain  GB  which  evaporates  more  readily  than  the  other  agent 
types.  The  agent  vapor  releases  range  up  to  170  lb  (thermal  failure  of 
all  munitions  in  an  ONC),  or  up  to  10  percent  of  the  available  agent 
Inventory. 

Within  the  types  of  handling  accidents,  the  events  designated  as 
HO,  which  are  related  to  the  packaging  of  munitions  in  ONCs  and  their 
movement  from  storage  (sending  sites)  to  the  munitions  handling  igloo 
(MHI),  predominate  over  handling  accidents  related  to  the  facility  (HF) . 
This  is  largely  because  (1)  there  are  more  handling  operations  Involved 
in  the  HO  accidents,  (2)  HF  accidents  generally  Involve  munitions  in 
ONCs,  which  provides  them  with  some  protection  from  puncture,  and  (3)  HF 
accidents  involving  bare  munitions  occur  inside  the  munitions  demilita¬ 
rization  building  (MDB)  which  is  designed  for  vapor  containment;  hence, 
including  the  probability  of  a  detonation  which  destroys  the  vapor  con¬ 
tainment  barrier,  both  the  frequency  of  a  release  and  the  release  itself 
are  relatively  lower. 

The  frequency  results  for  the  handling  accidents  could  not  be  com¬ 
pared  with  the  accidents  from  other  activities,  such  as  plant  opera¬ 
tions,  because  of  differences  in  units.  To  get  some  perspective  on  how 
they  conq>are  on  a  yearly  basis,  we  can  estimate  the  number  of  pallets 
that  could  be  handled  based  on  the  plant  annual  processing  rates.  For 
illustrative  purposes  we  calculate  the  number  of  bomb  pallets  that  are 
required  to  meet  the  annual  plant  processing  rate  as: 

5.4  bombs/h  x  24  h/day  x  5  day/week 
X  52  week/yr  /2  bombs/pallet  «  16,848  pallets/yr 

By  multiplying  the  HCl  sequence  frequency  for  TEAD  (1.2  x  10“^/ 
pallet)  with  the  number  of  pallets/yr,  the  annual  frequency  is  2.0  x 
10“3/yr.  Thus,  handling  accidents  which  lead  to  significant  agent 
releases  (in  particular,  agent  GB)  are  dominant  risk  contributors 
because  of  the  relatively  higher  annual  frequency  values.  Of  course 


11.3.  ACCIDENT  SCENARIOS  DURING  PLANT  OPERATIONS 


Included  in  the  analysis  for  this  phase  are  all  malfunctions  dur¬ 
ing  agent  processing/ Incineration  within  the  MDB  or  external  events 
affecting  drained  and  undralned  agent  In  the  MDB,  Including  those  In 
the  unpack  area  (UPA)  (up  to  10^  lb  of  agent  available)  and  nunltlons 
awaiting  processing  In  the  MHI,  up  to  3  x  10^  lb  of  agent  available. 
After  unpacking,  the  munitions  are  processed  by  conveyor  to  the  burster 
removal  area,  mine  punch-and-draln  area,  projectile  mortars  disassembly 
area,  rocket  and  burster  shearing  machines,  mine  machine  for  burster 
removal,  a  bulk  Item  drain  station,  a  toxic  cubicle  (TOX)  agent  storage 
tank,  furnaces  for  explosive  deactivation,  metal  parts  decontamination, 
and  agent  and  dunnage  Incinerators,  as  appropriate. 

11.3.1.  Internal  Events 

Because  of  the  engineered  safety  features  provided  In  the  plant 
design,  both  the  frequency  of  release  and  magnitude  of  release  associ¬ 
ated  with  accidents  Initiated  by  equipment  failure  and  human  error  are 
relatively  small.  Among  the  large  number  of  accident  scenarios  ana¬ 
lyzed,  the  highest  frequency  scenario  (P052)  Is  Initiated  by  an  Inad¬ 
vertent  feed  of  an  unpunched  burstered  munition  to  the  dunnage  Incinera¬ 
tor  (10*2/yr  for  mines;  5  x  lO'^/yr  for  other  munitions).  As  a  result 
of  detonation,  one  burstered  munition  Inventory  Is  released  to  the 
atmosphere  as  vapor  (only  up  to  15  lb  of  agent). 

The  largest  amount  of  agent  vapor  release  occurs  for  a  metal  parts 
furnace  explosion  (POAA)  with  ventilation  failure  (one  bulk  Item  Inven¬ 
tory  release,  up  to  1700  lb).  However,  this  scenario  was  assessed  to 
have  a  very  low  frequency,  around  10“l®/yr.  Another  event  xrtth  up  to 
several  hundred  pounds  of  vapor  release  Is  P048,  munition  detonation  In 
the  explosive  containment  room  vestibule  with  subsequent  fire  spreading 
to  unpacked  munitions.  However,  this  scenario  also  has  a  low  frequency, 
around  10"®/yr. 


11.3.2.  External  Events 

Aircraft  crashes  dominate  the  external  event  frequency,  and  there 
Is  little  difference  between  direct  and  Indirect  crashes.  The  small 
difference  Is  attributed  to  offsetting  effects.  Although  the  Indirect 
crash  has  smaller  conditional  probabilities  of  failures  than  the  direct 
crash,  the  risk  model  utilizes  a  larger  target  area  for  the  Indirect 
crash.  There  Is  very  little  distinction  In  the  frequency  of  aircraft 
crashes  with  or  without  fire,  since  historical  data  Indicate  that  there 
Is  roughly  a  50  percent  chance  that  the  crash  of  an  aircraft  will 
Involve  a  fire.  The  frequency  of  a  crash  onto  the  MDB  Is  considerably 
larger  than  that  for  the  MHl  because  the  surface  area  of  the  MDB  Is  more 
than  30  times  larger  than  the  MHI. 

The  frequency  of  large  aircraft  crashes  Is  estimated  to  be  higher 
at  ANAO  than  It  Is  for  TEAD.  This  Impacts  the  regional  versus  national 
collocation  option.  The  accident  scenario  Involving  the  crash  of  an 
airplane  onto  the  outdoor  agent  piping  system  for  the  modified  CAMDS 
facility  at  TEAD  has  a  frequency  of  about  10“®/yr  with  up  to  55  lb  of 
vapor  release.  This  scenario  Includes  both  large  and  small  aircraft 
crashes.  The  frequency  of  small  aircraft  (Including  helicopters) 
crashes  Is  at  least  two  orders  of  magnitude  higher  than  the  frequency  of 
large  aircraft  crashes  at  TEAD. 

The  frequencies  of  earthquake-lnduced  accident  scenarios  are 
generally  higher  for  TEAD  than  for  ANAD  since  TEAD  is  located  in  a 
region  more  prone  to  earthquakes.  Sequence  P033,  which  represents  an 
earthquake-initiated  munition  fall  and  fire  but  with  the  MDB  and  TOX 
Intact,  has  the  highest  frequency  (2  x  10~®/yr  for  ANAD  and  5  x  10~^/yr 
for  TEAD).  This  sequence  Involves  the  detonation  of  all  munitions  (If 
burstered)  In  the  UFA  since  the  fire  Is  not  suppressed  In  this  sequence. 


11. A.  ACCIDENT  SCENARIOS  DURING  TRANSPORT 

11.4.1.  Onsite  Transportation 


When  munitions  at  their  storage  locations  are  ready  for  demili¬ 
tarization!  they  are  transferred  Into  onsite  containers  and  then  moved 
by  truck  to  the  MHI.  The  onsite  transport  accidents  are  Identified  as 
VO  scenarios.  The  agent  available  In  a  truck  carrying  (four)  ONCs 
ranges  up  to  7000  lb. 


As  a  result  of  analysis  for  both  Internally  Initiated  events  (human 
error  or  equipment  failure)  and  externally  Initiated  events,  the  follow¬ 
ing  conclusions  were  reached: 


1.  The  ONC  package  provides  a  substantial  protection  from  Impact 
and  crush  forces.  The  results  show  that  accident  frequencies 
resulting  In  Impact  or  crush  failure  are  Insignificant.  This 
Is  largely  due  to  the  administrative  control  to  be  imposed 
during  truck  travel  which  limits  truck  speed  to  no  more  than 
20  mph.  The  impact  forces  at  this  velocity  are  not  sufficient 
to  breach  the  containment. 


2.  The  probability  of  puncture  resulting  from  truck  collision/ 
overturn  Is  the  most  Important  mechanical  failure  mode. 

3.  Truck  accidents  which  generate  fires  are  not  likely  to  deto¬ 
nate  burstered  munitions  Inside  onsite  packages,  since  they 
provide  15-mln  protection  from  an  all-engulf Ing  fire.  These 
scenario  frequency  results  are  quite  low  because  of  the  admin¬ 
istrative  control  for  limiting  the  amount  of  fuel  In  the  truck 
so  as  not  to  exceed  a  10-min  fire. 


A.  For  tornado-initiated  accidents,  puncture  as  a  result  of  truck 
overturn  is  the  dominant  contributor  to  the  sequence 
frequency. 

5.  Generation  of  undue  forces  during  truck  accidents  that  could 
cause  burster  detonations  has  a  small  contribution  to  the 
overall  truck  transportation  risk. 

6.  The  amount  of  agent  spilled  or  burned  during  truck  accidents 
resulting  in  the  breach  in  containment  by  puncture  forces 
generally  involve  the  agent  content  of  one  munition.  Up  to 
10  percent  is  released  as  vapor. 

7.  ONCs  can  fail  when  an  aircraft  crashes  into  the  truck  (VOS, 
V07).  The  entire  truckload  is  Involved,  and  up  to  10  percent 
is  released  as  a  vapor.  Hence,  aircraft  crash- Initiated  truck 
accidents  have  the  most  severe  consequences.  It  should  be 
noted,  however,  that  none  of  the  accident  sequences  has  a 
frequency  greater  than  10~^/yr. 


11.5.  UNCERTAINTIES  IN  THE  ANALYSIS 


In  assessing  the  risks  associated  with  the  onsite  disposal  alter¬ 
native,  every  effort  was  made  to  perform  best-estimate  analyses,  l.e., 
"realistic"  evaluation  and  quantification  of  the  accident  sequence 
frequencies  and  associated  agent  releases.  The  use  of  pessimistic  or 
conservative  modeling  techniques  or  data  for  quantification  violates  the 
Intent  of  the  probabilistic  nature  of  the  study.  Realistic  modeling  and 
quantification  permits  a  balanced  evaluation  of  risk  contributors  and 
comparison  of  alternatives.  However,  for  realistic  or  best-estimate 
calculations,  the  obvious  concern  Is  the  accuracy  of  the  results. 
Uncertainty  analysis  addresses  this  concern. 


11.5.1.  Sources  of  Uncertainty 


Since  the  event  sequences  discussed  In  Section  S.3  have  not 
actually  occurred.  It  Is  difficult  to  establish  the  frequency  of  the 
sequence  and  associated  consequences  with  great  precision.  For  this 
reason,  many  parameters  In  a  risk  assessment  are  treated  as  probabilis¬ 
tically  distributed  parameters,  so  that  the  computation  of  sequence  fre¬ 
quencies  and  resulting  consequences  can  involve  the  probabilistic  combi¬ 
nation  of  distributions. 


There  are  three  general  types  of  uncertainty  associated  with  the 
evaluations  reported  In  this  document:  (1)  modeling,  (2)  data,  and 
(3)  completeness. 


There  exist  basic  uncertainties  regarding  the  ability  of  the  vari¬ 
ous  models  to  represent  the  actual  conditions  associated  with  the 
sequence  of  events  for  the  accident  scenarios  that  can  occur  In  the 
storage  and  disposal  activities.  The  ability  to  represent  actual  phe¬ 
nomena  with  analytical  models  Is  always  a  potential  concern.  The  use  of 
fundamental  models  such  as  fault  trees  and  event  trees  Is  sometimes  sim¬ 
plistic  because  most  events  depicted  In  these  models  are  treated  as 
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leading  to  one  of  tvro  binary  states:  success  or  failure  (l.e.,  partial 
successes  or  failures  are  Ignored).  Model  uncertainties  are  difficult 
to  quantify  and  are  addressed  In  this  study  by  legitimate  efforts  of  the 
analysts  to  make  the  models  as  realistic  as  possible.  Vftiere  such  real¬ 
ism  could  not  be  achieved,  conservative  approaches  were  taken. 

Ho  uncertainty  from  oversights,  errors,  or  omission  from  the  models 
used  (e.g.,  event  trees  and  fault  trees)  Is  Included  In  the  uncertainty 
analysis  results.  Including  these  uncertainties  Is  beyond  the  state-of- 
the-art  of  present  day  uncertainty  analysis. 

The  uncertainties  In  the  assignment  of  event  probabilities  (e.g., 
component  failure  rates  and  Initiating  event  frequencies)  are  of  two 
types:  Intrinsic  variability  and  lack  of  knowledge.  An  exaiiq>le  of 
Intrinsic  variability  Is  that  where  the  available  experience  data  Is  for 
a  population  of  similar  components  In  similar  envlroiunents ,  but  not  all 
the  components  exhibit  the  same  reliability.  Intrinsic  variations  can 
be  caused,  for  example,  by  different  manufacturers,  maintenance  prac¬ 
tices,  or  operating  conditions.  A  second  exanq>le  of  Intrinsic  variabil¬ 
ity  Is  that  related  to  the  effects  of  long-term  storage  on  the  condition 
of  the  munitions  as  conq)ared  to  their  original  configuration.  Lack  of 
knowledge  uncertainty  Is  associated  with  cases  where  the  model  parameter 
Is  not  a  random  or  fluctuating  variable,  but  the  analyst  slDq>ly  does  not 
know  what  the  value  of  the  parameter  should  be.  Both  of  these  data 
uncertainty  types  are  encountered  In  this  study. 

11.5.2.  Uncertainties 

The  sequence  frequency  results  discussed  In  this  report  are  pre¬ 
sented  In  terms  of  a  median  value  and  a  range  factor  of  a  probability 
distribution  representing  the  frequency  of  Interest.  The  range  factor 
represents  the  ratio  of  the  95th  percentile  value  of  frequency  to  the 
50th  percentile  (l.e.,  median)  value  of  frequency.  The  uncertainty  In 
the  sequence  frequency  Is  determined  using  the  STADIC-2  program 


(Ref.  11-1)  to  propagate  the  uncertainties  associated  with  each  of  the 
events  in  the  fault  trees  or  event  trees  through  to  the  end  result. 

Some  scenarios,  such  as  those  associated  with  tornado  missiles  and  low- 
impact  detonations  have  rather  large  uncertainties.  The  difficulty  with 
tornado-generated  missiles  lies  with  the  difficulty  in  accurately  model¬ 
ing  the  probability  that  the  missile  will  be  In  the  proper  orientation 
to  penetrate  the  munition  and  In  predicting  the  number  of  missiles  per 
square  foot  of  wind.  The  difficulty  with  the  low-impact  detonations 
lies  with  the  sparse  amount  of  data  available  and  Its  applicability  to 
the  scenarios  of  Interest.  In  general,  uncertainties  tend  to  be  large 
when  the  amount  of  applicable  data  Is  small  and  vice  versa. 
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A.l.  REFERENCE  LIST  OF  ACCIDENT  SEQUENCES 


A  reference  list  of  accident  sequences  is  presented  here.  The  list 
is  arranged  by  the  particular  demilitarization  phase  with  which  a  given 
sequence  is  associated.  Accident  sequences  related  to  storage  are  pre¬ 
sented  first  followed  by  plant  operations,  handling,  and  onsite  trans¬ 
portation.  The  sequences  can  be  identified  by  the  coding  scheme  pre¬ 
sented  in  Section  A  of  this  document.  Following  the  sequences  ID,  a 
brief  description  of  the  accident  is  given  along  with  an  indication  as 
to  whether  or  not  the  sequence  was  considered  for  further  analysis.  The 
bases  for  scenario  screening  are  provided  in  the  logic  model  section. 
Section  4,  of  the  main  body  of  this  report. 


Sequence 

ID 


Sequence  Description 


Considered 
for  Further 
Analysis 


SLl  Munition  develops  a  leak  during  the  in-between  Yes 

inspection  period. 

SL2  Munition  punctured  by  forklift  tine  during  Yes 

leaker-handling  activities. 

SL3  Spontaneous  ignition  of  rocket  during  storage  (not  No 

analyzed  for  lack  of  quantitative  data) . 

SL4  Large  aircraft  direct  crash  onto  storage  area;  Yes 

fire  not  contained  in  30  min.  (Note:  Assume 


detonation  occurs  if  burstered  munitions  hit;  fire 
involving  burstered  munitions  not  contained  at 
all.) 


SL5  Large  aircraft  indirect  crash  onto  storage  area;  Yes 

fire  not  contained  in  30  min.  (See  note  in  SL4.) 

SL6'  Tornado-generated  missiles  strike  the  storage  Yes 

magazine,  warehouse,  or  open  storage  area;  muni¬ 
tions  breached  (no  detonation). 

SL7  Severe  earthquake  breaches  the  munitions  in  stor-  Yes 

age  Igloos;  no  detonations. 

SL8  Meteorite  strikes  the  storage  area;  fire  occurs;  Yes 

munitions  breached  (if  burstered,  detonation  also 
occurs ) . 

SL9  Munition  dropped  during  leaker  isolation  oper-  Yes 

atlon;  munition  punctured. 

SLID  Storage  igloo  or  warehouse  fire  from  internal  No 

sources . 

SLll  Munitions  are  dropped  due  to  pallet  degradation.  No 

SL12  Liquid  petroleum  gas  (LPG)  infiltrates  igloo/  No 

building. 

SL13  Flammable  liquids  stored  in  nearby  facilities  No 

explode;  fire  propagates  to  munition  warehouse 
(applies  to  NAAP). 


i 
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ACCIDENT  SEQUENCES  FOR  STORAGE  (Continued) 


Considered 

Sequence  for  Furthe 

ID  Sequence  Description  Analysis 

SL14  Tornado-Induced  building  collapse  leads  to  No 

breaching/detonation  of  munitions. 

SL15  Small  aircraft  direct  crash  onto  warehouse  or  Yes 

open  storage  yard;  fire  occurs;  not  contained 
In  30  min. 

SL16  Large  aircraft  direct,  crash;  no  fire;  detonation  Yes 

( if  burstered) . 

SL17  Large  aircraft  direct  crash;  fire  contained  Yes 

within  30  min  (applies  to  nonburstered  munitions 
only) . 

SL18  Small  aircraft  direct  crash  onto  warehouse  or  Yes 

open  storage  yard;  no  fire. 

SL19  Small  aircraft  direct  crash  onto  warehouse  or  Yes 

open  storage  yard;  fire  contained  in  30  min. 

SL20  Large  aircraft  indirect  crash  onto  storage  area;  Yes 

no  fire. 

SL21  Large  aircraft  indirect  crash  onto  storage  area;  Yes 

fire  contained  in  30  min. 

SL22  Severe  earthquake  leads  to  munition  detonation.  Yes 

SL23  Tornado-generated  missiles  strike  the  storage  Yes 

igloo  and  leads  to  munition  detonation. 

SL2A  Lightning  strikes  ton  containers  stored  outdoors.  Yes 

SL25  Munition  dropped  during  leaker  isolation;  muni-  Yes 

tion  detonates. 

SL261  Earthquake  occurs;  NAAP  warehouse  is  intact;  no  Yes 

ton  containers  damaged;  fire  occurs. 

SL262  Earthquake  occurs;  NAAP  warehouse  is  intact;  ton  Yes 

container  damaged;  no  fire. 

S1263  Earthquake  occurs;  NAAP  warehouse  is  intact;  ton  Yes 

container  damaged;  fire  occurs. 


ACCIDENT  SEQUENCES  FOR  STORAGE  (Continued) 


Sequence 

ID  Sequence  Description 

SL264  Earthquake  occurs;  NAAP  warehouse  is  damaged;  ton 
containers  damaged;  no  fire. 

SL265  Earthquake  occurs;  NAAP  warehouse  is  damaged;  ton 
containers  damaged;  fire  occurs. 

S1271  Earthquake  occurs;  TEAD  warehouses  intact;  muni¬ 
tions  intact;  fire  occurs  at  one  warehouse. 

SL272  Earthquake  occurs;  TEAD  warehouses  intact;  muni¬ 
tions  intact;  fire  occurs  at  two  warehouses. 

SL273  Earthquake  occurs;  one  TEAD  warehouse  is  damaged; 

munitions  intact;  fire  occurs  at  one  warehouse. 

SL274  Earthquake  occurs;  one  TEAD  warehouse  is  damaged; 

munitions  intact;  fire  occurs  at  two  warehouses. 

SL275  Earthquake  occurs;  two  TEAD  warehouses  damaged; 

munitions  intact;  fire  occurs  at  one  warehouse. 

SL276  Earthquake  occurs;  two  TEAD  warehouses  damaged; 

munitions  intact;  fire  occurs  at  two  warehouses. 

SL281  Earthquake  occurs;  UMDA  warehouses  intact;  muni¬ 
tions  intact;  fire  occurs  at  one  warehouse. 

SL282  Earthquake  occurs;  UMDA  warehouses  intact;  muni¬ 
tions  intact;  fire  occurs  at  two  warehouses. 

SL283  Earthquake  occurs;  UMDA  warehouses  intact;  muni¬ 
tions  in  one  warehouse  damaged;  no  fire  occurs. 

SL284  Earthquake  occurs;  UMDA  warehouses  intact;  muni¬ 
tions  in  one  warehouse  damaged;  fire  occurs  at 
warehouse  with  damaged  munitions. 

SL285  Earthquake  occurs;  UMDA  warehouses  intact;  muni¬ 
tions  in  one  warehouse  damaged;  fire  occurs  at 
warehouse  with  undamaged  munitions. 

SL286  Earthquake  occurs;  UMDA  warehouses  intact;  muni¬ 
tions  in  one  warehouse  damaged;  fire  occurs  at 
two  warehouses. 


Sequence 

ID 

Sequence  Description 

Considered 
for  Further 
Analysis 

SL287 

Earthquake  occurs;  UMDA  warehouses  Intact;  muni¬ 
tions  In  two  warehouses  damaged;  no  fire  occurs. 

Yes 

SL288 

Earthquake  occurs;  UMDA  warehouses  Intact;  muni¬ 
tions  In  two  warehouses  damaged;  fire  occurs  at 
warehouse  with  damaged  munitions. 

Yes 

SL289 

Earthquake  occurs;  UMDA  warehouses  Intact;  muni¬ 
tions  In  two  warehouses  damaged;  fire  occurs  at 
two  warehouses. 

Yes 

SL2810 

Earthquake  occurs;  one  UMDA  warehouse  damaged; 
munitions  In  one  warehouse  damaged;  no  fire 
occurs. 

Yes 

SL2811 

Earthquake  occurs;  one  UMDA  warehouse  damaged; 
munitions  in  one  warehouse  damaged;  fire  occurs 
at  warehouse  with  damaged  munitions. 

Yes 

SL2812 

Earthquake  occurs;  one  UMDA  warehouse  damaged; 
munitions  In  one  warehouse  damaged;  fire  occurs 
at  two  warehouses. 

Yes 

SL2813 

Earthquake  occurs;  one  UMDA  warehouse  damaged; 
munitions  In  two  warehouses  damaged;  no  fire 
occurs . 

Yes 

SL2814 

Earthquake  occurs;  one  UMDA  warehouse  damaged; 
munitions  In  two  warehouses  d£unaged;  fire  occurs 
warehouse  with  damaged  munitions. 

Yes 

SL2815 

Earthquake  occurs;  one  UMDA  warehouse  damaged; 
munitions  In  two  warehouses  damaged;  fire  occurs 
at  two  warehouses. 

Yes 

SL2816 

Earthquake  occurs;  two  UMDA  warehouses  damaged; 
munitions  In  two  warehouses  damaged;  no  fire 
occurs. 

Yes 

SL2817 

Earthquake  occurs;  two  UMDA  warehouses  damaged; 
munitions  In  two  warehouses  damaged;  fire  occurs 
at  both  warehouses. 

Yes 
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ACCIDENT  SEQUENCES  FOR  PLANT  OPERATIONS  -  EXTERNAL  EVENTS 


Sequence 

ID 

Sequence  Description 

Considered 
for  Furthei 
Analysis 

POl 

Tornado-generated  missile  puncture/crush  muni¬ 
tions  In  the  MHI. 

Yes 

P02 

Tornado-generated  missile  detonate  munitions  In 
the  MHI. 

Yes 

P03 

Tornado-generated  missile  puncture/crush  muni¬ 
tions  In  the  UPA. 

Yes 

POA 

Tornado-generated  missile  detonate  munitions  In 
the  UPA. 

Yes 

P05 

Tornado-generated  missile  damages  the  agent 
piping  system  between  the  6DS  and  TOX  at  TEAD 
(bulk-only  facility). 

Yes 

P06 

Meteorite  strikes  the  MHI. 

Yes 

P07 

Meteorite  strikes  the  UPA. 

Yes 

P07A 

Meteorite  strikes  the  TOX. 

Yes 

P08 

Meteorite  strikes  the  agent  piping  system 
between  the  BDS  and  TOX  at  TEAD  (bulk-only 
facility) . 

Yes 

P09 

Direct  large  aircraft  crash  onto  the  MHI;  no  fire. 

Yes 

POlO 

Direct  large  aircraft  crash  onto  the  MHI;  fire 
not  contained  In  0.5  h. 

Yes 

poll 

Direct  large  aircraft  crash  onto  the  MHI;  fire 
contained  In  0.5  h. 

Yes 

P012 

Direct  large  aircraft  crash  damages  the  MDB;  no 
fire. 

Yes 

P013 

Direct  large  aircraft  crash  damages  the  MDB;  fire 
not  contained  In  0.5  h. 

Yes 

P014 

Direct  large  aircraft  crash  damages  the  MDB;  fire 
contained  In  0.5  h. 

Yes 

P015 


Indirect  large  aircraft  crash  damages  the  MHI;  no 
fire. 


Yes 


ACCIDENT  SEQUENCES  FOR  PLANT  OPERATIONS  -  EXTERNAL  EVENTS  (Continued) 


Sequence 

ID 


Sequence  Description 


Considered 
for  Further 
Analysis 


P016 

Indirect  large  aircraft  crash  damages  the  MHI; 
fire  not  contained  in  0.5  h. 

Yes 

P017 

Indirect  large  aircraft  crash  damages  the  MHI; 
fire  contained  in  0.5  h. 

Yes 

F018 

Indirect  large  aircraft  crash  damages  the  MDB;  no 
fire. 

Yes 

P019 

Indirect  large  aircraft  crash  damages  the  MDB; 
fire  not  contained  in  0.5  h. 

Yes 

P020 

Indirect  large  aircraft  crash  damages  the  MDB; 
fire  contained  in  0.5  h. 

Yes 

P021 

Direct  crash  of  a  large  or  small  aircraft  damages 
the  outdoor  agent  piping  system  at  TEAD;  no  fire. 

Yes 

P022 

Direct  crash  of  a  large  or  small  aircraft  damages 
the  outdoor  agent  piping  system  at  TEAD;  fire 
occurs  and  not  contained. 

Yes 

P023 

Earthquake  causes  the  munitions  in  the  MHI  to 
fall  and  be  punctured. 

No 

P02A 

Earthquake  causes  munitions  in  the  MHI  to  fall 
and  detonate. 

No 

P025 

Earthquake  damages  the  MDB  structure,  munitions 
fall  and  are  punctured;  fire  suppressed. 

Yes 

P026 

Earthquake  damages  the  MDB  structure,  munitions 
fall  and  are  punctured;  earthquake  also  initiates 
fire;  fire  suppression  system  falls. 

Yes 

P028A('>) 

Earthquake  damages  the  MDB  structure,  munitions 
fall  and  are  punctured;  TOX  damaged;  fire  occurs; 
fire  suppressed. 

No 

P028 

Earthquake  damages  the  MDB  structure,  munitions 
fall  and  are  punctured;  TOX  damaged;  fire  occurs; 
fire  suppression  system  fails. 

No 

P029 

Earthquake  damages  the  MDB;  munitions  are  intact; 
fire  occurs;  fire  suppression  system  falls. 

Yes 
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ACCIDENT  SEQUENCES  FOR  PLANT  OPERATIONS  -  EXTERNAL  EVENTS  (Continued) 


Considered 

Sequence 

for  Further 

ID 

Sequence  Description 

Analysis 

P030  Earthquake  damages  the  MDB;  munitions  are  intact 

TOX  damaged;  no  fire  occurs. 

P031A  Earthquake  damages  the  MDB;  munitions  are  intact 
TOX  damaged;  fire  occurs;  fire  suppressed. 

P031  Earthquake  damages  the  MDB;  munitions  are  intact 

TOX  damaged;  fire  occurs;  fire  not  suppressed. 

P032  Earthquake  causes  munitions  to  fall  and  deto¬ 

nate;  MDB  breached  by  detonation;  the  TOX  is 
intact;  no  fire.^*^) 

P033  Earthquake  causes  munitions  to  fall  but  no  deto¬ 

nation  occurs;  the  MDB  is  intact;  the  TOX  is 
intact;  earthquake  also  initiates  fire;  fire 
suppression  system  fails. 

P03A  Earthquake  causes  munitions  to  fall  but  no  deto¬ 

nation  occurs;  the  MDB  is  Intact;  the  TOX  is 
damaged;  fire  occurs;  fire  suppression  system 
fails. 


(^)Screened  out  due  to  design  changes. 

(t>) Sequence  27  not  used. 

(^)Screened  out  on  the  basis  of  frequency. 


ACCIDENTS  FOR  PLANT  OPERATIONS  -  INTERNAL  EVENTS 

Sequence 

ID 

Sequence  Description 

Considered 
for  Further 
Analysis 

POAl 

One  munition  falls  off  the  conveyor  in  the  ECV 
due  to  a  process  upset  or  improper  loading  and  is 
punctured.  The  spill  is  not  cleaned  up  in  1  h. 

No 

P0A2 

One  munition  falls  off  the  conveyor  and  deto¬ 
nates  in  the  ECV,  caused  by  process  upset  or 
improper  loading. 

Yes 

P0A3 

Same  as  POAl  with  added  fire. 

No 

POAA 

Same  as  P0A2  with  failure  propagating  to  other 
munitions  due  to  fragments. 

No 

P0A5 

A  process  upset  results  in  spill  of  agent  inven¬ 
tory  in  ECR. 

No 

P0A6 

Same  as  P0A5  with  fire. 

No 

P0A7 

Same  as  P0A5  with  detonation. 

No 

P0A8 

A  punched  munition  falls  off  the  BSA  conveyor. 

Bulk  drain  station  did  not  drain  the  munitions 
before  sending  it  to  the  BSA,  so  that  a  spill 
occurs. 

No 

P0A9 

Same  as  P0A8  with  fire. 

No 

P050 

Large  spill  (contents  of  agent  collection  tank) 
in  TOX  cubicle  due  to  pipe  failure  (528  gal). 

No 

P051 

Small  spill  (typically  less  than  50  gal)  in  TOX 
cubicle  due  to  pipe  failure. 

No 

P052 

Same  as  P051  with  fire. 

No 

Other  sequences  Identified  are  summarized  in  Tables  A-1,  A-2,  and  A-3. 
These  deal  with  furnace/incinerator  events.  The  event  trees  corres¬ 
ponding  to  these  sequences  are  in  Section  7.1.  None  of  the  sequences 
in  these  tables  was  considered  for  detailed  analysis. 


TABLE  A-1 

EVENTS  CONSIDERED  FOR  THE  DEACTIVATION  FURNACE  SYSTEM 


Event  Description 

Stop  munitions  feed  Failure  on  this  event  tree  branch  implies  that 

(DFS-SMF)  feed  of  drained  rockets  or  mines  to  the  DFS  is 

not  discontinued,  given  that  a  shutdown  signal 
occurs . 

This  branch  point  represents  the  failures  of 
the  ventilation  system  to  provide  filtered  air 
to  the  DFS  pump.  (See  Section  7.1  for  the 
fault  tree . ) 

Stop  fuel  (DFS-SFA)  Failure  of  this  event  tree  branch  implies  that 

the  natural  gas  supply  line  to  the  burner  in 
the  DFS  retort  is  not  isolated,  given  that  a 
shutdown  signal  occurs.  If  ventilation  to  the 
room  has  failed,  operator  recovery  is  per¬ 
mitted  to  prevent  a  possible  room  explosion, 
(See  Section  7.1  for  the  fault  tree.) 

Explosion  does  not  occur  Failure  of  this  branch  implies  that  a 
(DFS-EXP)  natural  gas  explosion  has  occurred  in  the  DFS 

room.  For  the  situation  in  which  ventilation 
succeeds,  the  size  of  this  explosion  is  the 
size  of  a  DFS  furnace  explosion.  For  the  case 
in  which  room  ventilation  has  failed,  the 
explosion  is  the  size  of  a  DFS  room  explosion. 
The  probability  was  subjectively  estimated. 

Failure  of  this  branch  implies  that  the  DFS 
room  structure  has  been  breached  by  an  explo¬ 
sion.  The  probability  was  subjectively 
estimated. 


Explosion  contained 
(DFS-CONT) 


Ventilation  system 
(DFS -VENT) 


TABLE  A- 2 

EVENTS  CONSIDERED  FOR  THE  LIQUID  INCINERATOR  (LIC) 


Event 


Description 


Ventilation  system 
(LIC-VENT) 


Stop  agent  feed  (LIC-SAF) 


Shutdown  PAS  (LIC-SPAS) 


Stop  fuel  to  burners 
(LIC-SFF) 


Avoid  explosion  (LIC-EXP) 


This  branch  point  represents  the  failure 
of  the  ventilation  system  to  provide  air 
to  the  LIC  room.  (The  fault  tree  Is  In 
Section  7.1.) 

This  branch  point  represents  both  the  ACS 
and  the  operator  falling  to  shut  off  the 
agent  feed  and  falling  to  recognize  that 
the  feed  Is  not  shut  off.  Different  time 
periods  and  therefore  different  recovery 
probabilities  apply  for  different  scenar¬ 
ios.  (The  fault  tree  Is  In  Section  7.1.) 

This  branch  point  represents  both  the  ACS 
and  the  operator  falling  to  stop  flow 
through  the  PAS  and  falling  to  recognize 
that  flow  continues.  (The  fault  tree  Is 
In  Section  7.1.) 

The  branch  point  represents  both  the  ACS 
and  the  operator  falling  to  shut  off  the 
fuel  within  15  min  and  falling  to  recogn¬ 
ize  that  the  fuel  Is  not  shut  off.  This 
event  applies  to  the  PCC  and  the  AB.  (The 
fault  tree  Is  In  Section  7.1.) 

This  branch  represents  Ignltlon/detonatlon 
of  accumulated  fuel/alr  or  agent/alr  mix¬ 
tures.  The  probability  was  subjectively 
assigned. 


Structure  contains  explosion  This  branch  represents  failure  of  the  LIC 
(LIC-CONT)  room  to  contain  an  explosion.  The  proba¬ 

bility  was  subjectively  assigned. 

Stop  fuel  to  LIC-PCC  burner  This  branch  point  represents  both  the  ACS 
(LIC-SFP)  and  the  operator  failing  to  shut  off  fuel 

to  the  LIC  PCC  burner  within  15  min  and 
falling  to  recognize  that  the  fuel  Is 
not  shut  off.  (The  fault  tree  is  in 
Section  7.1.) 


TABLE  A- 3 

EVENTS  CONSIDERED  FOR  THE  METALS  PARTS  FURNACE  (MPF) 


MPF-1  Tree 


Description 


Ventilation  System 
(MPF- VENT) 


Stop  fuel  (MPF-SFA) 


This  branch  point  represents  the  failure 
of  the  exhaust  system  to  provide  filtered 
air  to  the  MPF  room.  (See  Section  7.1 
for  the  fault  tree.) 

Failure  of  the  branch  point  implies  that 
the  natural  gas  supply  to  one  or  more 
burners  in  the  MPF  has  not  been  isolated. 
If  room  ventilation  has  failed,  operator 
recovery  is  permitted  to  prevent  a  possi¬ 
ble  room  explosion.  (See  Section  7.1  for 
the  fault  tree.) 


Explosion  avoided  (MPF-EXP) 


Failure  of  this  branch  point  implies  that 
natural  gas  explosion  has  occurred  in  the 
MPF  room.  For  this  situation  in  which 
ventilation  succeeds,  the  size  of  the 
explosion  is  the  size  of  the  DFS  furnace 
explosion.  For  the  case  in  which  room 
ventilation  has  failed,  the  explosion  is 
the  size  of  an  MPF  room  explosion.  The 
probability  was  subjectively  estimated. 


Explosion  contained 
(MPF-CONT) 


Failure  of  this  branch  point  implies  that 
the  MPF  room  structure  has  been  breached 
by  the  MPF  explosion.  The  probability 
was  subjectively  estimated. 


MPF-2  Tree 


Explosion  does  not  occur 
(MPF-EX) 


This  branch  point  involves  the  undrained 
munition  exploding  in  the  MPF.  The 
probability  was  subjectively  estimated. 


MPF  room  and  vent  integrity  This  branch  point  Involves  damage  to  the 
maintained  (MPF-INT)  MPF  room  or  vent  such  that  agent  in  the 

room  is  released  to  the  atmosphere.  The 
probability  was  subjectively  estimated. 


ACCIDENT  SEQUENCES  FOR  HANDLING  (ONSITE) 


Sequence 

ID 

Sequence  Description 

Considered 
for  Further 
Analysis 

HOI 

Drop  of  bare  pallet  or  single  Item  at  storage 
area. 

Yes 

H02 

Forklift  collision  with  short  duration  fire  at 
storage  area  Involving  bare  munitions. 

Yes 

H03 

Forklift  tine  accident  Involving  bare  munitions 
at  storage  area. 

Yes 

H04 

Forklift  collision  accident  without  fire  at  stor¬ 
age  area  Involving  bare  munitions. 

Yes 

H05 

Drop  of  onsite  container. 

Yes 

H06 

Forklift  collision  with  short  duration  fire  dur¬ 
ing  handling  of  onsite  container. 

Yes 

H07 

Forklift  collision  without  fire  during  handling 
of  onsite  container. 

Yes 

H08 

Drop  of  offsite  container. 

No 

H09 

Collision  accident  with  short  duration  fire  dur¬ 
ing  handling  of  offsite  container. 

No 

HOlO 

Collision  accident  without  fire  during  handling 
of  offsite  container. 

No 

HOll 

Drop  of  bare  palletized  munition  leads  to 
detonation. 

Yes 

H012 

Forklift  collision  accident  at  storage  area  leads 
to  detonation  of  burstered  munition. 

Yes 

H013(a) 

Forklift  collision  accident  without  fire  at 
maintenance  facility. 

No 

H014 

Forklift  tine  accident  Involving  munitions  In 
onsite  container. 

No 

H015(«) 

Improper  valve  replacement  on  ton  container. 

No 

H016(a) 

Drop  of  single  munition  In  maintenance  facility. 

No 
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ACCIDENT  SEQUENCES  FOR  HANDLING  (ONSITE)  (Continued) 

Sequence 

ID 

Sequence  Description 

Considered 
for  Further 
Analysis 

H017 

Drop  of  pellet  containing  a  leaking  munition  dur¬ 
ing  leaker  isolation  operations  at  LPF. 

No 

H018 

Drop  of  single  leaking  munition  in  vapor  con¬ 
tainment  room  of  leakers  processing  facility. 

No 

H019 

Forklift  tine  puncture  during  leaker  isolation 
operations. 

No 

H020 

Collision  accident  with  short  duration  fire  dur¬ 
ing  handling  of  leaking  munition  (munition  in 
pallet) . 

No 

H021 

Collision  accident  without  fire  during  handling 
of  leaker. 

No 

H022 

Drop  of  munition  in  onsite  container  leads  to 
detonation. 

Yes 

H023 

Drop  of  munition  in  offsite  container  leads  to 
detonation. 

No 

H024 

Collision  accident  during  munition  handling  in 
onsite  container  leads  to  detonation  due  to 

Impact . 

Yes 

H025 

Collision  accident  during  munition  handling  in 
offsite  container  leads  to  detonation  due  to 

Impact . 

No 

H026 

Collision  accident  in  onsite  container  with  pro¬ 
longed  fire  leads  to  thermal  detonation. 

Yes 

H027 

Collision  accident  in  offsite  container  with  pro¬ 
longed  fire  leads  to  thermal  detonation. 

No 

H028(l>) 

Drop  of  single  munition  at  maintenance  facility 
leads  to  detonation. 

No 

H029 

Drop  of  pallet  containing  leaker  leads  to 
detonation. 

No 

H030 

Drop  of  single  leaking  munition  leads  to 
detonation. 

No 

ACCIDENT  SEQUENCES  FOR  HANDLING  (ONSITE)  (Continued) 


Sequence 

ID 

Sequence  Description 

Considered 
for  Further 
Analysis 

H031 

Collision  accident  involving  a  leaker  leads  to 
detonation  due  to  impact. 

No 

H032 

Failure  to 
container. 

detect  a  leak  In  the  offsite 

No 

(®)These  scenarios  were  originally  Identified  for  the  handling  of 
A. 2-in.  mortars  and  lO-Smm  cartridges  during  movement  from  storage  to 
a  maintenance  facility  (and  back)  for  propellant  separation. 


(b)Leakers  developing  during  transportation  from  storage  igloo  to 
holding  area. 


ACCIDENT  SEQUENCES  FOR  HANDLING  (FACILITY) 


Considered 

Sequence 

for  Further 

ID 

Sequence  Description 

Analysis 

Munition  dropped  during  movement  from  the  MHI  to 
the  MDB. 


Bare  single  munition  dropped  during  handling 
Inside  the  MDB. 


Forklift  collision  accident  with  short  duration 
fire  during  handling  from  MHI  to  MDB. 


Forklift  tine  accident  during  handling  from  MHI 
to  MDB. 


Forklift  collision  accident  with  prolonged  fire 
during  handling  from  MHI  to  MDB  leads  to 
detonation. 


Collision  accident  without  fire  during  movement 
from  the  MHI  to  the  MDB. 


Munition  dropped  Inside  the  MDB  (In  onsite 
container) . 


Forklift  tine  accident  occurs  Inside  the  MDB. 


Forklift  collision  accident  without  fire  Inside 
the  MDB. 


Munition  pallet  dropped  during  movement  from  the 
MHI  to  the  MDB  leads  to  detonation. 


Bare  single  munition  dropped  during  handling 
Inside  the  MDB  leads  to  detonation. 


Palletized  munition  In  onsite  container  dropped 
during  handling  Inside  the  MDB  leads  to 
detonation. 


Collision  accident  from  MHI  to  MDB  leads  to 
detonation  due  to  Impact. 
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ONSITE  TRANSPORT  ACCIDENT  SEQUENCES 


Considered 

Sequence  for  Further 

ID  Sequence  Description  Analysis 

VOXYZOOl  A  munitions  vehicle  colllslon/overturn  occurs  and  Yes 
crush  forces  fall  the  agent  containment. 

VOXYZ002  A  munitions  vehicle  colllslon/overturn  occurs  and  No 
Impact  forces  fall  the  agent  containment. 

VOXYZ003  A  munitions  vehicle  colllslon/overturn  occurs  and  Yes 
puncture  forces  fall  the  agent  containment. 

VOXYZ004  A  munitions  vehicle  accident  with  fire  occurs,  Yes 

causing  detonation  of  burstered  munitions.  Igni¬ 
tion  of  the  propellant  by  a  probe  could  also 
detonate  the  burster  of  a  cartridge  and  the 
burster  of  a  rocket  could  be  detonated  by  Impact- 
Induced  Ignition  of  the  rocket  propellant. 

V0XYZ005  A  munitions  vehicle  accident  with  fire  occurs,  Yes 

causing  nonburstered  munitions  to  fall. 

VOXyZ006  An  aircraft  crashes  on  a  munitions  vehicle.  No  Yes 

fire  occurs;  Impact  forces  the  agent  containment. 

V0XYZ007  An  aircraft  crashes  on  a  munitions  vehicle.  Fire  Yes 

occurs,  but  Impact  forces  fall  the  agent  contain¬ 
ment. 


VOXYZ009  A  severe  earthquake  occurs,  causing  a  munitions  Yes 

vehicle  accident  and  crush  forces  fall  the  agent 
containment. 

VOXYZOlO  A  severe  earthquake  occurs,  causing  a  munitions  No 

vehicle  accident  and  Impact  forces  fail  the  agent 
containment . 

VOXYZOll  A  severe  earthquake  occurs,  causing  a  munitions  Yes 

vehicle  accident  and  puncture  forces  fail  the 
agent  containment. 

VOXYZ012  A  severe  earthquake  occurs,  causing  a  munitions  Yes 

vehicle  accident  and  fire  detonates  burstered 
munitions . 

V0XYZ013  A  severe  earthquake  occurs,  causing  a  munitions  Yes 

vehicle  accident  and  fire  falls  nonburstered 
munitions . 


A-17 


ONSITE  TRANSPORT  ACCIDENT  SEQUENCES  (Continued) 

Considered 

Sequence  for  Furthe 

ID  Sequence  Description  Analysis 

V0XYZ014  A  tornado  occurs,  generating  a  missile  or  causing  Yes 
a  truck  overturn  and  mechanical  forces  fail  agent 
containment . 

VOXYZ015  A  truck  collision/overturn  occurs  generating  Yes 

undue  mechanical  forces  which  cause  detonation  of 
burstered  munitions. 


3.0  INTRODUCTION 


Several  accident  scenarios  were  identified  that  could  result  in  a 
significant  release  of  agent  to  the  environment  during  demilitarization 
operations  at  CONUS  sites.  These  scenarios  include; 

•  TOX  Area  Fire 

•  BSA  Area  Fire 

•  ECV  Area  Fire 

•  Carbon  Filter  Fire 

•  Carbon  Filter  Desorption 

•  Continued  Agent  Feed  in  Non-operating  LIC 

•  PAS  Agent  Scrubbing 

•  Feed  Full  Ton  Container  into  MPF. 

Several  other  scenarios  involving  munition  detonation  were 
identified  but  not  evaluated  in  favor  of  providing  documentation  for  the 
sensitivity  analyses.  Results  from  the  sensitivity  analysis  are  described 
for  each  scenario  as  follows. 

3.1  Results  from  Sensitivity  Analyses 

3.1.1  TOX  Area  Fire.  The  TOX  Area  fire  involves  the  following 
sequence  of  events: 

(1)  Rupture  of  filled  500-gallon  agent  storage  tank  in  TOX  Area 

(2)  Ignition  of  agent  spill 

(3)  Failure  of  TOX  fire  suppression  system 

(4)  Fire  vaporizes  agent  which  is  vented  from  the  TOX  to  the 
carbon  filters. 

Undecomposed  agent  can  be  released  to  the  environment  through  the 
filters  if  the  agent  flow  rate  is  sufficiently  high,  the  filters  approach 
saturation  and/or  the  filter  inlet  gas  temperature  is  high.  The  sensitivity 


of  the  magnitude  of  agent  released  to  the  environment  was  therefore 
considered  on  the  following  variables: 

•  Residence  time  of  volatilized  agent  In  the  TOX 

•  Fire  size  (directly  related  to  undecomposed  agent  flow  rate) 

•  Combustion  efficiency  (directly  related  to  undecomposed  agent 
flow  rate) 

•  Capacity  of  carbon  to  absorb  agent 

•  Gas  temperature  at  filter  Inlet. 

In  an  agent  fire,  heat  returned  to  the  pool  of  burning  liquid  by 
convective  and  radiative  mechanisms  Is  used  to  volatilize  agent.  Part  of 
the  volatilized  agent  Is  combusted  with  the  remainder  potentially  vented 
from  the  area.  Residence  time  In  the  TOX  of  volatilized  agent  that  Is  not 
combusted  was  Included  In  the  sensitivity  analysis  because  the  fire  may 
raise  the  temperature  to  a  point  where  thermal  decomposition  of  the 
volatilized  agent  could  occur.  As  a  worst  case,  a  1-second  residence  time 
was  assumed.  This  Is  equivalent  to  the  volatilized  agent  traveling  a 
distance  of  about  four  Inches  prior  to  entering  the  TOX  ventilation  exhaust 
duct.  Residence  times  of  2,  5,  10,  and  14.3  seconds  were  also  evaluated. 

The  14.3-second  residence  time  Is  the  most  credible  case  and  would  Involve  a 
fire  on  the  floor  directly  below  the  exhaust  duct  (5-feet  above  the  floor). 
This  Is  possible  because  a  SOO-gallon  spill  of  agent  will  fill  the  500- 
gallon  sump  in  the  TOX  and  completely  cover  the  TOX  floor. 

As  discussed  In  detail  In  the  calculation  summaries  given  In 
Appendix  A  pages  A1  through  A28,  the  fire  size  will  be  limited  by  the 
ventilation  flow  rate.  The  worst  case,  I.e.  the  largest  fire,  will  result 
when  the  fire  burns  a  sufficient  amount  of  agent  to  reduce  the  oxygen 
concentration  to  the  minimum  level  required  for  combustion.  A  second  case 
Involves  a  fire  size  equivalent  to  the  TOX  sump  area.  Another  fire  size  is 
where  the  release  of  undecomposed  agent  from  the  TOX  area  reaches  a  maximum 
for  a  particular  residence  time.  This  fire  size,  calculated  by  trial  and 
error.  Is  where  the  agent  vaporization  rate  Is  relatively  high  while  the 
agent  combustion  rate  and.  In  turn,  the  TOX  temperature  Is  sufficiently  low 
such  that  thermal  decomposition  of  agent  Is  not  appreciable. 


The  combustion  efficiencies  evaluated  were  50,  75  and  100  percent. 
It  Is  Important  to  note  that  a  100  percent  combustion  efficiency  Implies 
that  all  the  agent  Involved  in  combustion  Is  converted  to  CO2,  H2O,  P2O5, 
etc.  so  that  the  entire  heating  value  of  the  agent  Is  generated.  A 
combustion  efficiency  of  less  than  100  percent  Implies  that  Intermediate 
combustion  products  formed  so  that  the  entire  heating  value  of  the  agent  was 
not  generated.  Agent  can  be  volatilized  but  not  combusted  for  any 
combustion  efficiency  Including  100  percent.  This  could  occur  If  the  part 
of  the  agent  is  directed  away  from  the  flames  as  It  Is  volatilized. 

The  capacity  of  the  carbon  to  adsorb  agent  was  varied  from  0.05  lb 
agent/lb  carbon  as  a  worst  case  to  0.2  lb  agent/lb  carbon.  The  0.2  lb 
capacity  is  still  conservative  when  compared  with  the  capacities  of  0.37  lb 
HD/lb  carbon,  0.298  lb  VX/lb  carbon,  and  0.318  lb  6B/lb  carbon  given  In 
Reference  1.  These  capacities  are  for  6210  coconut-derived,  non-whetlerized 
activated  carbon,  which  Is  similar  to  the  activated  carbon  used  at  CAMDS. 

The  gas  temperature  at  the  filter  Inlet  was  varied  from  100  F  up 
to  a  temperature  calculated  from  heat  balances.  The  calculated  temperature 
Is  the  worst  case  because  It  does  not  Incorporate  all  heat  losses  from  the 
gas  during  traversal  between  the  TOX  Area  and  the  filters.  The  rate  and 
degree  of  adsorption  Is  known  to  be  exponentially  and  Inversely  proportional 
to  temperature.  Thus,  a  small  Increase  In  temperature  may  cause  a 
significant  decrease  in  adsorption  efficiency. 

Table  1  gives  a  summary  of  agent  releases  for  various  fire  sizes 
and  combustion  efficiencies.  The  maximum  fire  duration  given  in  Table  1  was 
estimated  as  follows.  The  maximum  fire  duration  for  large  fires  which 
reduce  the  oxygen  concentration  In  the  TOX  to  the  minimum  required  for 
combustion  Is  the  time  required  for  an  operator  to  close  the  Inlet  dampers 
to  the  TOX,  thereby  shutting  off  the  oxygen  supply.  As  shown  In  Figure  1, 
approximately  15  minutes  are  required  for  a  99  percent  probability  that  an 
operator  will  respond  to  close  the  TOX  Inlet  dampers.  This  Includes  a  5 
minute  period  In  which  the  operator  will  attempt  to  start  the  fire 
protection  system  In  the  TOX.  In  cases  where  the  fire  size  Is  not  at  a 
maximum,  additional  time  Is  required  for  consumption  of  the  oxygen  remaining 
In  the  TOX  after  the  dampers  are  shut.  The  fire  will  continue  until  the 


TABLE  1.  SUMMARY  OF  TOX  AREA  FIRE  CALCULATIONS' 
Fire  Size  and  Combustion  Efficiency  are  Varied 
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Figure  1.  Operator  Times  Versus  Probabilities 
for  Failure  to  Close  Dampers 
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minimum  oxygen  level  required  for  combustion  is  reached,  at  which  point  the 
fire  is  assumed  to  self-extinguish. 

Results  indicate  that  both  fire  size  and  combustion  efficiency 
have  a  significant  effect  on  the  magnitude  of  agent  released  to  the 
environment.  The  worst  cases  are  75  percent  combustion  efficiency/21  sq. 
ft.  fire  for  HD  and  for  GB.  No  combination  of  the  variables  allowed  a 
significant  release  of  VX. 

Table  2  gives  a  summary  of  agent  releases  for  various  gas 
residence  times  in  the  TOX.  The  most  credible  residence  time  of  14.3 
seconds  results  in  a  significantly  lower  agent  release.  The  14/75  fire 
size/combustion  efficiency  combination  is  the  worst  case  for  a  14.3-second 
residence  time.  This  trend  is  explained  later  for  the  BSA  area  fire. 

Table  3  gives  a  summary  of  agent  releases  for  variable  carbon 
capacities.  The  more  credible  capacity  of  0.2  lb  agent/lb  carbon 
significantly  reduced  the  amount  of  agent  released  by  at  least  an  order  of 
magnitude. 

Table  4  gives  a  summary  of  agent  releases  for  variable  gas 
temperatures  at  the  filter  inlet.  The  lower  temperatures  resulted  in 
significantly  lower  agent  releases  due  to  the  strong  dependence  of  the 
adsorption  rate  constant  on  temperature. 

The  worst-case  and  most-credible-case  agent  releases  for  the  TOX 
Area  fire  are  given  in  Table  5.  The  most  credible  case  was  selected  based 
on  a  14.3-second  residence  time  for  the  volatilized  agent  in  the  TOX,  a 
carbon  capacity  of  0.05  lb  agent/lb  carbon  (worst  case),  filter  inlet  gas 
temperature  calculated  from  heat  balances  (worst  case),  and  the  worst  case 
fire  size/combustion  efficiency  combination.  The  worst  case  was  as  above 
except  for  a  1-second  residence  time.  The  most  credible  case  is  still  very 
conservative  because: 

•  The  selected  agent  capacity  of  carbon  is  below  that  obtained 
during  actual  agent  tests 

•  Filter  bank  inlet  gas  temperature  will  be  lower  than  the 
calculated  temperature  when  all  heat  losses  are  taken  into 
account 

•  As  described  in  the  calculation  summary  of  Appendix  A,  worst- 
case  assumptions  were  used  whenever  information  was 
unavailable. 
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TABLE  2.  SUMMARY  OF  TOX  AREA  FIRE  CALCULATIONS^^^ 
Residence  Time  of  Fire  Products  in  TOX  Varied 


Fi re  Size/ 
Coe bust  I  on 
E'f iciency 
(sq  ft./*) 


Residence 
Tiee 
(sec , ) 


Tiee  to  Release 
>0.001  lb  Agent 
(yin.) 


Agent  Released 
After  S  Minutes 
(lbs.) 


Agent  Released 
After  Maxi  sue 

Fire  Duration 
(lbs.) 


Max ieua  Fire 
Duration  with  99* 
Probability  of 
Operator  Closing 
Daaper  (Min.) 


<  0.0001 
(  0.0001 


TABLE  3.  SUMMARY  OF  TOX  AREA  FIRE  CALCULATIONS^^^ 
Carbon  Capacity  Varied 


<  0.8001 


<  6.0001 


<  0.0097 


<  0.0001 

<  0.0001 

<  0.0001 

<  0.0001 

<  0.0001 

<  0.0001 

<  0.0001 

<  0.0001 

(a]  Gas  taaperatura  at  filtar  inlat  ca(cu(atad  froa  Kaat  batancas.  The  rasidence  tiae  of  the  fira  products  in  the 
TOX  araa  *  ona  saeond.  lorst-casa  fira  siza/coabustion  affieianc/  coablnations  shown. 

(b)  Gas  taaparatura  at  filtar  inlat  caleulatad  froa  haat  balancas  Tha  residance  tiaa  of  the  fire  products  in  the 
TOX  araa  ■  14.3  saconds.  lorst-casa  fira  siza/coabustion  afficiency  coablnations  shown. 


TABLE  4.  SUMMARY  OF  TOX  AREA  FIRE  CALCULATIONS^*^ 


Filter  Inlet  Gas  Temperature  Varied 


Agent 

Fire  Size/ 

Coabustion  Filter  Inlat  Gas 
Efficiency  Tsaporature 
(sq.  ft./*)  (F) 

Tiaa  to  Rataasa 
>I.M1  lb  Agent 

(Min.) 

Agent  Released 
After  5  Minutes 
(lbs.) 

Agent  Ra leased 
After  Haxiaua 

Fire  Duration 
(lbs.) 

Hsiiaua  Fire 
Duration  with  99* 
Probability  of 
Operator  Closing 
Daapar  (Min.) 

HD 

21/75 

IM 

IS 

<  I.IMl 

■  .M92 

25 

HO 

21/75 

114 

4 

<  •.M28 

■.2814 

25 

Hrf") 

14/75 

IM 

32 

<  I.MBl 

■  •889 

31 

Hrf") 

14/75 

115 

21 

<  ■1661 

■.••58 

31 

GB 

21/75 

IM 

9 

•  .Mil 

■  8662 

23 

GB 

21/75 

116 

2 

•.•229 

6.4324 

23 

Ga[b) 

14/75 

IM 

17 

<  •  M^l 

■  •385 

29 

Grf« 

14/75 

IM 

9 

•  .MI2 

8.1613 

29 

VX 

14/75 

IM 

>  61 

<  •  M^l 

<  ■.■Ml 

18 

vx 

14/75 

126 

>  61 

<  •  •Ml 

<  ■■■■1 

18 

14/75 

IM 

>  66 

<  ■  •Ml 

<  ■■■01 

21 

14/76 

126 

>  61 

<  ■  ••■1 

<  ■.■■■1 

21 

(a)  Carbon  capacity  ■  1.15  lb  agant/lb  carbon.  Tho  rosidtnca  tiae  of  the  fire  producta  in  the  TOX  area  *  1  second 
lorst-case  fire  size/cosbustion  efficiency  coebinatiens  shown. 


(b)  Carbon  capacity  ■  I.IS  lb  agant/lb  carbon.  The  residence  tine  of  the  fire  prodocts  in  the  TOX  area  «  14.3 
seconds . 

lorst-case  fire  size/coabustion  efficiency  coabinatiens  shewn. 


TABLE  5.  TOX  AREA  FIRE  WORST  CASE/MOST  CREDIBLE  CASE  AGENT  RELEASES 


tORST  CASE 


Coabuatien  TIm  to  Roloaoo  Agont  Raloasod 
Fira  Siza  Efficianey  >f.Ml  lb  Agant  Aftar  S  llinutaa 
(aq.  ft.)  (»)  (Min.)  (Iba.) 


Agent 

(aq.  ft.) 

(*) 

HD 

21 

7S 

GB 

21 

7S 

VX 

14 

76 

Agant  Ralaaaad 
Aftar  Maiiaua 
Fira  Duration 
(Iba.) 


<  1.0001 


6.4324 
<  0  0001 


Fira  Siza 
(iq.  ft.) 


Coabuation 
Eff iciancy 
(*) 


Tiaa  to  Ralaasa 
>0.001  lb  Agant 
(Min.) 


Agent  Ralaaaad 
After  S  Minutes 
(Iba.) 


Agent  Released 
Aftar  Maiiaua 
Fira  Duration 
(Iba.) 


Maiiaua  Fira 
Duration  with  99! 
Probabi I ity  of 
Operator  Closing 
Daaper  (U  in . ) 


<  0.0001 


<  0.0001 


(a)  Carbon  capacity  «  0.0S  lb  agant/lb  carbon,  filter  inlet  gas  taaperatura  calculated  froa  heat  balance.  The 
raai dance  tiaa  of  the  fira  products  in  the  TOX  area  ■  1  aacond. 

(b)  Carbon  capacity  «  0.0S  lb  agent/lb  carbon,  filter  inlet  gas  taaperatura  calculated  froa  heat  balance.  The 
residence  tiaa  of  the  fira  products  in  tha  TOX  ares  >  14.3  seconds,  lorst-casa  fira  size/coabustion  efficiency 
used. 


-•  "J-  V  V  •,« 


-  1 


P 

Maiiaua  Fire 

Duration  with  99X 

Probab i 1 i ty  of 

Operator  Closing 

Daaper  (Min.) 

U'M 

It  is  important  to  note  that  a  spill  significantly  less  than  500 
gallons  can  cause  the  worst-case  or  most-credible-case  agent  releases  to  be 
achieved  because  the  fire  areas  for  these  events  are  approximately  the  same 
as  or  less  than  the  TOX  sump  area  of  20  sq.  ft. 

3.1.2  BSA  Area  Fire.  The  BSA  Area  fire  involves  the  following 
sequence  of  events: 

(1)  Contents  of  a  filled  ton  container  are  spilled  on  the  floor 
in  the  Buffer  Storage  Area. 

(2)  Spilled  agent  is  ignited. 

(3)  Fire  vaporizes  agent,  which  is  vented  from  the  BSA  to  the 
carbon  filters. 

The  variables  described  in  the  TOX  Area  fire  were  evaluated  for 
the  BSA  Area  fire.  A  summary  of  the  calculations  is  given  in  Appendix  A, 
pages  A29  through  A35. 

Table  6  gives  a  summary  of  agent  releases  during  a  BSA  fire  for 
various  fire  sizes  and  combustion  efficiencies.  The  size  of  an  agent 
release  is  most  dependent  on  fire  size.  Although  large  fires  resulted  in 
large  rates  of  undecomposed  agent  being  generated,  the  resultant  temperature 
in  the  BSA  (over  1000  F  in  some  cases)  would  cause  significant  thermal 
decomposition  of  the  agent.  However,  in  some  cases  the  high  rate  of 
undecomposed  agent  being  expelled  from  the  TOX  could  overwhelm  th«  carbon 
filters  due  to  limitations  in  the  adsorption  kinetics.  Combustion 
efficiency  had  a  significant  effect  on  agent  release  for  all  cases,  with  the 
worst  case  being  a  100  percent  combustion  efficiency.  The  much  larger  agent 
releases  in  the  BSA  Area  as  compared  with  the  TOX  Area  are  due  to  the 
availability  of  more  ventilation  air  in  the  BSA,  thereby  allowing  combustion 
and  volatilization  of  agent  at  a  more  rapid  rate. 

Table  7  gives  a  summary  of  agent  releases  during  a  BSA  fire  for 
various  residence  times  of  fire  products  in  the  BSA.  The  most  credible 
residence  time  of  35.6  seconds  is  equivalent  to  a  fire  directly  beneath  the 
BSA  exhaust  duct.  A  worst-case  residence  time  was  assumed  to  be  1  second. 

For  a  particular  residence  time,  the  agent  released  is  dependent 
upon  fire  size.  As  shown  in  Figure  2,  the  amount  of  agent  released 


TABLE  6.  SUMMARY  OF  BSA  AREA  FIRE  CALCULATIONS  (TON  CONTAINER) 
Fire  Size  and  Combustion  Efficiency  are  Varied 


Coebustien 

Tiee  to  Release 

Agent  Released 

Agent  Released 
After  Maaieue 

Hazisue  Fire 
Duration  with  99X 
Probability  of 

Fire  Size 

Efficiency 

>I.N1  lb  Agent 

After  S  Minutes 

Fire  Duration 

Operator  Closing 

(sq.  ft.) 

(*) 

(Min.) 

(lbs.) 

(lbs.) 

Daepor  (Min.) 

<  •.■Ml 

•  .•M4 

13.8317 

75.2488 

<  •  •Ml 

<  ■.■Ml 

<  •.■Ml 

<  ■.■■•1 

<  •.MM 

<  ■■■■I 

<  ■  M^l 

<  ■•••1 

<  •  ••81 

<  ■■•■I 

29.8988 

168.7588 

<  •  M^l 

<  •.•8(1 

<  ■■••1 

<  ■  Ml 

<  •  •Ml 

<  •  ■Ml 

<  •  •Ml 

<  •  Ml 

<  •  •Ml 

<  •  M^l 

<  •  •Ml 

<  ■  M^l 

<  •  ■Ml 

<  8. Mil 

<  •.■••1 

<  •  .N81 

<  ■  •••1 

<  •••■1 

<  •  ■•81 

<  •.■•■1 

<  •■881 

<  •8881 

Carbon  capacity  ■  t.lS  lb  agont/lb  carbon,  gas  taaporaturo  at  filter  inlat  calculated  free  heat  balances  The 
residence  tiee  of  the  fire  products  in  the  BSA  ares  ■  1  second. 

Suep  area  ■  4  square  feet. 

The  fire  burns  to  coepletion  within  8  einutes. 

The  fire  does  net  release  agent  free  the  BSA  ares. 

The  fire  burns  to  coepletion  within  7  einutes. 

The  fire  burns  to  coepletion  within  8  einutes. 

■erst-csse  fire  ares/coebustion  efficiency  coebinatien. 


(i)  Carbon  capacity  *  IIS  lb  agent/lb  carbon.  The  filter  inlet  gas  teaperature  calculated  free  heat  balances, 
lorst-case  fire  size/coebustion  efficiency  coabinations  shown. 


KBsidencB  time  of  FirB 

Products  in  the  BSfl  Rreo 


FIRE  AREA  (SQ  FT) 


Effect  of  Residence  Time  on  Maximum  Quantity  of  Agent 
Entering  Filters  during  the  BSA  Fire 


increases  as  the  fire  size  increases,  reaches  a  maximum,  and  then  fails  to 
zero.  As  the  fire  size  is  increased  the  amount  of  volatilized  agent  that  is 
not  combusted  increases  in  proportion  to  the  fire  size.  However,  increasing 
the  fire  size  causes  the  temperature  in  the  araa  of  the  fire  to  increase 
such  that  thermal  decomposition  becomes  significant.  Because  thermal 
decomposition  is  exponentially  related  to  fire  size  through  temperature,  the 
amount  of  undecomposed  agent  decreases  as  the  fire  size  increases.  These 
trends  are  illustrated  in  Figure  3. 

The  fire  size  which  gives  the  maximum  agent  release  decreases  as 
the  residence  time  increases,  as  shown  in  Figure  2.  This  is  because  as  the 
residence  time  is  increased  the  amount  of  undecomposed  agent  released 
decreases  for  a  particular  fire  size.  Thus,  smaller  fires  which  result  in  a 
lower  temperature  and  hence,  lower  degree  of  thermal  decomposition,  would 
favor  generation  of  more  undecomposed  agent  than  larger  fires.  It  is 
important  to  note  that  the  worst-case  fire  size/combustion  efficiency  was 
calculated  by  trial  and  error  for  each  worst-case  and  most-credible-case 
residence  time  for  the  TOX,  BSA  and  ECV  fire  scenarios. 

Table  8  gives  a  summary  of  agent  release  during  a  BSA  fire  for 
various  carbon  capacities.  The  carbon  capacity  has  only  a  slight  effect  on 
the  amount  of  agent  released  within  the  range  of  capacities  evaluated.  This 
is  because  the  high  temperature  of  the  gases  entering  the  filters  makes 
adsorption  unfavorable. 

Table  9  gives  a  summary  of  agent  releases  during  a  BSA  fire  for 
various  gas  temperature  at  the  filter  inlet.  The  lower  gas  temperature  had 
a  significant  effect  on  agent  release  amounting  to  a  reduction  of  between 
three  and  five  orders  of  magnitude. 

The  worst-case  and  most-credible-case  agent  releases  for  the  BSA 
Area  fire  scenarios  are  given  in  Table  10.  The  most  credible  case  was  based 
on  a  35.6-second  residence  time  for  the  volatilized  agent  in  the  BSA,  a 
carbon  capacity  of  0.05  lb  agent/lb  carbon  (worst  case),  a  filter  inlet  gas 
temperature  calculated  from  heat  balances  (worst  case),  and  the  worst-case 
fire  size/combustion  efficiency  combination.  The  worst  case  is  as  above 
except  for  a  1-second  residence  time.  The  most  credible  case  is  still  very 
conservative  for  similar  reasons  to  those  given  in  the  TOX  area  fire 
section. 
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Figure  3. 
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Variance  of  Thermal  Decomposition  of  Agent  and  Generation 
Rate  of  Undecomposed  Agent  with  Fire  Area  for  the  BSA  Fire 
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TABLE  8.  SUMMARY  OF  BSA  AREA  FIRE  CALCULATIONS  (TON  CONTAINER) 

Carbon  Capacity  Varied 


Agent 

Fire  Size/ 

Coabustion  Carbon  Capacity 
Efficiency  (lb  agent/ 

(sq.  ft./X)  lb  carbon] 

Tiae  to  Release 
>S.M1  lb  Agent 
(Min.) 

Agent  Released 
After  S  Minutes 
(Iba.) 

Agent  Released 
After  Msxiaus 

Fire  Ouration 
(Iba.) 

Maxiaua  Fire 
Ouration  eith  99X 
Probabi 1 ity  of 
Operator  Closing 
Oaaper  (Min.) 

HO 

IB/IN 

a. 2 

1 

12.7031 

61.2926 

19 

HO 

la/lM 

a. as 

1 

13.0317 

76.2496 

19 

Hof^j 

11/ IM 

a. 2 

1 

a. 4213 

3.0SB3 

29 

H0(b) 

ii/iea 

a. as 

1 

a.47SB 

6.62S4 

29 

GB 

la/iaa 

a. 2 

1 

26.0097 

128.6018 

19 

G6 

la/iae 

a. as 

1 

29.6980 

168.7S86 

19 

GsCb) 

ii/iaa 

a. 2 

1 

1.9434 

IS. 7784 

26 

G8(b) 

ii/iaa 

a. as 

1 

2.2634 

28.6833 

26 

VX 

n/iaa 

0.2 

3 

0.0103 

0.0666 

16 

VX 

ii/iaa 

0.0S 

3 

9.0138 

0.1391 

16 

vx(b) 

7/iaa 

0.2 

>  B0 

<  6. 9001 

<  0.0001 

20 

VxCb) 

7/100 

0  as 

>  60 

<  0  0001 

<  0.0001 

20 

Gas  taapcrature  at  filter  inlet  calculated  free  heat  balances.  The  residence  tiae  of  the  fire  products  in 
the  BSA  area  *  1  second,  lorst-case  fire  size/coebustion  efficiency  coebinations  shoen. 

Saee  as  in  (a)  except  the  residence  tiae  of  the  fire  production  in  the  BSA  area  ■  35.8  seconds. 
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TABLE  9.  SUMMARY  OF  BSA  AREA  FIRE  CALCULATIONS  (TON  CONTAINER) 
Filter  Inlet  Gas  Temperature  Varied 


Carbon  capacity  ■  l.fS  lb  ag«nt/lb  carbon.  Tho  roaidonco  tioo  of  tho  fira  producta  in  the  BSA  area  s  1  aaeond. 
lorst'Case  fire  aize/coabuation  efficiency  coebinationa  ahem. 


Saee  aa  in  (a)  except  the  reaidence  tiae  of  the  fire  producta  in  the  BSA  area  >  35.6  aecends. 


‘  V 


V  S  ■ ' 
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TABLE  10.  BSA  AREA  FIRE  WORST  CASE/MOST  CREDIBLE  CASE  AGENT  RELEASES 


fOBT  CASE 


Agent 

Pi ra  Size 
(»q-  ft.) 

Ceabustien 
Eff ieianey 
{*) 

Tiae  to  Re  lasso 

>I.N1  lb  Agent 
(yin.) 

Agent  Ralaasad 
After  S  yinutes 
(Ike.) 

Agent  Released 
After  yaiinua 

Firs  Duration 
(Iba.) 

yaainun  Fire 

Duration  with  99X 
Probability  of 
Operator  Cloaing 
Daaper  (Bin.) 

HD 

IS 

IIS 

1 

13.8317 

75.2488 

19 

GB 

18 

IIS 

1 

39.S98I 

168.7588 

19 

VX 

11 

iss 

3 

•.1138 

8.1391 

16 

yOST  CSaiBLE  CASE  (b) 


Agent 

Fire  Site 
(sq.  ft.) 

Ceebustien 

Efficiency 

(«) 

Tiae  to  Release 
>8.881  lb  Agent 
(Min.) 

Agent  Released 
After  5  Hinutes 
(Iks.) 

Agent  Released 
After  yaaiaun 

Fire  Duration 
(lbs.) 

yaaisua  Fire 
Duration  eith  99X 
Probabi 1 ity  of 
Operator  Closing 
Daaper  (Hin.) 

HD 

11 

!•• 

1 

8.4758 

6.8254 

29 

GB 

11 

188 

1 

2.2634 

28.6833 

26 

VX 

7 

188 

>  61 

<  •.•181 

<  1.1801 

28 

(i)  Cirbon  capacity  *  I.IS  lb  ajant/lb  carbon,  filtor  inUt  gas  teaperature  calculated  froa  heat  balances.  The 
residence  tine  of  the  fire  products  in  the  BSA  area  ■  1  second. 

(b)  Carbon  capacity  •  i.lS  lb  sgent/lb  carbon,  filter  inlet  gas  teaperature  calculated  froa  haat  balances.  The 
residence  tiae  of  the  fire  products  in  the  BSA  area  >  3S.6  seconds. 


I 


It  is  Important  to  note  that  the  worst-case  agent  release  would 
involve  a  TC  that  gradually  leaks  agent  rather  than  a  ruptured  TC  that 
spills  the  entire  contents  at  once.  The  size  of  the  fire  following  ignition 
of  spilled  agent  from  a  leaking  TC  may  be  at  the  worst-case  conditions 
depending  upon  the  leak  rate  and  spill  configuration.  However,  ignition  of 
the  spill  from  a  ruptured  TC  would  probably  cause  an  initial  large  fire 
that,  because  of  thermal  decomposition,  releases  an  insignificant  amount  of 
agent  to  the  environment.  This  large  fire  would  rapidly  consume  agent  and 
decrease  in  size  until  it  is  restricted  to  the  sump  at  which  time  low  levels 
of  agent  would  be  released  to  the  environment.  The  fire  would  rapidly  pass 
through  the  zone  where  large  amounts  of  undecomposed  agent  are  generated. 

As  an  approximation,  agent  released  from  a  fire  in  the  case  of  a  ruptured  TC 
can  be  taken  as  being  equivalent  to  a  sump  fire  for  the  entire  fire 
duration. 

3.1.3  ECV  Area  Fire.  The  ECV  Area  fire  involves  the  following 
sequence  of  events: 

(1)  Contents  of  a  filled  ton  container  are  spilled  on  the  floor 
in  the  Explosive  Containment  Vestibule.  The  location  assumed 
is  given  in  Appendix  A. 

(2)  Spilled  agent  is  ignited. 

(3)  Fire  vaporizes  agent  which  is  vented  from  the  ECV  area  to  the 
carbon  filters. 

The  variables  described  in  the  TOX  area  fire  were  evaluated  for 
the  ECV  area  fire.  A  summary  of  the  calculations  is  given  in  Appendix  A, 
pages  A36  through  A41. 

Table  11  gives  a  summary  of  agent  releases  during  an  ECV  fire  for 
varying  fire  size  and  combustion  efficiency.  As  in  the  case  of  the  BSA  Area 
fire,  both  the  fire  size  and  combustion  efficiency  have  a  significant  effect 
on  the  amount  of  agent  released.  The  worst  cases  are  100  percent  combustion 
efficiency/ll  sq.  ft.  fire  size  for  HD  and  GB.  No  significant  VX  releases 
were  observed  for  any  combination  of  fire  size  and  combustion  efficiency. 

Table  12  gives  a  summary  of  agent  releases  during  an  ECV  fire  for 
various  residence  times  of  volatilized  agent  in  the  ECV.  The  most  credible 
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TABLE  11.  SUMMARY  OF  ECV  AREA  FIRE  CALCULATIONS  (TON  CONTAINER) 
Fire  Size  and  Combustion  Efficiency  Varied 


(a) 


Agent 

Fire  Size 
(sq.  ft.) 

Coebustien 

Efficiency 

(») 

Tiae  to  Release 
>I.N1  lb  Agent 
(y.n.) 

Agent  Released 
After  8  Minutes 
(Iba.) 

Agent  Released 
After  Maxiaua 

Fire  Duration 
(lbs.) 

Maxiaua  Fire 
Duration  with  99X 
Probab i 1 i ty  of 
Operator  Closing 
Daaper  (Min.) 

HD 

Suapt**) 

IN 

>  61 

<  6.1611 

<  I.NIl 

36 

HO  W 

11 

IN 

4 

1.6622 

6.6268 

16 

HO 

48 

IN 

(•) 

<  6.6611 

<  6.6661 

16 

HO 

Suap 

7B 

>  61 

<  6  .N61 

<  1.6661 

39 

HD 

84 

78 

(•) 

<  6.1661 

<  6.6661 

16 

HO 

Suap 

88 

>  66 

<  1.6161 

<  6.6661 

69 

HD 

96 

81 

(•) 

<  1.1661 

<  6.6661 

16 

G8 

Suap 

IN 

>  66 

<  6.6681 

<  6.6661 

36 

gbCO 

11 

IN 

2 

6.6116 

6.1786 

16 

G8 

41 

IN 

(•) 

<  6.6661 

<  6.6661 

16 

G8 

Suap 

78 

>  66 

<  I.INl 

<  6.6661 

37 

08 

6S 

78 

(•) 

<  6.6N1 

<  6.6661 

16 

G8 

Suap 

H 

>  66 

<  1.6661 

<  6.6661 

83 

GB 

64 

81 

(•) 

<  6.6N1 

<  6.6661 

W 

VX 

Suap 

IN 

>  66 

<  6.6611 

<  6.6661 

16 

vx^'J 

7 

IN 

>  66 

<  6.6661 

<  6.6661 

14 

VX 

17 

IN 

(•) 

<  1.6661 

<  6.6661 

16 

VX 

Suap 

78 

>  66 

<  6.6661 

<  6.6661 

23 

VX 

22 

78 

(•) 

<  6.1661 

<  6.6661 

16 

VX 

Suap 

81 

>  61 

<  6.1661 

<  6.6661 

37 

VX 

34 

81 

(•) 

<  6.6681 

<  6.6661 

16 

(t)  Carbon  capacity  *  f.lS  lb  agent/lb  carbon,  gas  toaparatura  at  filter  inlet  calculated  froa  heat  balances.  The 
residence  tiae  of  the  fire  products  in  the  ECV  ares  *  1  second. 

(b}  Suep  area  >  4  square  feat. 

(c)  lorst-casa  fire  size/coebustion  efficiency  coabination. 

(d)  The  fire  burns  to  coapletion  within  II  ainutes. 

(a)  The  fire  dees  net  release  agent  froa  the  ECV  area. 


TABLE  12.  SUMMARY  OF  ECV  AREA  FIRE  CALCULATIONS  (TON  CONTAINER)'* 
Residence  Time  of  Fire  Products  in  ECV  Varied 


Fir*  Size/ 

Coabustion  R*sid*nc« 

Efficiancy  Tia* 

(*q.  ft./*)  (Me.) 


Tia*  to  Ralaase  Agent  Released 
>1.101  lb  Agent  After  S  Minutes 
(Min.)  (lbs.) 


Agent  Released 
After  Masiaua 
Fire  Duration 
(lbs.) 


1.0001 

0.0007 

<  0  0001 

0.0016 

<  0.0001 

< 

0.0001 

<  0  0001 

< 

e.eoei 

(  1.0001 

< 

0.0001 

<  0  0001 

< 

e.eeei 

<  0.0001 

< 

o.oeoi 

<  0.0001 

< 

0  0001 

Maxiaua  Fire 
Duration  with  99* 
Probability  of 
Operator  Closing 
Daaper  (M  in.) 


(a)  Carbon  eapcity  c  0.0S  lb  agent/lb  carbon.  The  filter  inlet  gas  teaperature  calculated  froa  heat  balances, 
lorst-case  fire  size/coabustion  efficiency  coabination  shown  for  the  1-second  residence  tiae. 


(b)  Saae  as  in  (a)  except  the  worst-case  fire  size/coebustion  efficiency  coabination  shown  for  the  21.1-second 
residence  tia*. 


residence  time  of  21.1  seconds  is  equivalent  to  a  fire  directly  beneath  the 
ECV  exhaust  duct.  A  worst-case  residence  time  was  assumed  to  be  1-second. 

Table  13  gives  a  summary  of  agent  releases  during  an  ECV  fire  for 
variable  carbon  capacities.  The  carbon  capacity  has  a  significant  effect  on 
agent  release.  However,  the  amount  of  agent  release  was  not  directly 
proportional  to  the  carbon  capacity,  but  varied  from  about  a  two-fold  to  a 
ten-fold  reduction  in  agent  release  as  the  carbon  capacity  was  increased 
four-fold. 

Table  14  gives  a  summary  of  agent  releases  during  an  ECV  fire  for 
various  gas  temperatures  at  the  filter  inlet.  The  lower  gas  temperature 
generally  caused  a  reduction  in  the  amount  of  HD  and  GB  released  by  about 
two  orders  of  magnitude. 

The  worst-case  and  most-credible-case  agent  releases  for  the  ECV 
Area  fire  scenario  are  given  in  Table  15.  The  most  credible  case  was  based 
on  a  21.1-second  residence  time  for  the  volatilized  agent  in  the  ECV,  a 
carbon  capacity  of  0.05  lb  agent/lb  carbon  (worst  case),  a  filter  inlet  gas 
temperature  calculated  from  heat  balances  (worst  case),  and  the  worst-case 
fire  size/combustion  efficiency  combination.  The  worst  case  was  as  above 
except  for  a  1-second  residence  time.  The  most  credible  case  is  still  very 
conservative  for  reasons  similar  to  those  given  in  the  TOX  Area  fire 
section. 

3.1,4  Carbon  Bed  Fire.  Two  possible  scenarios  were  considered 
for  ignition  of  the  carbon  filter  beds  —  Ignition  from  an  entrained  spark 
and  spontaneous  ignition.  In  the  former  scenario,  a  spark  from  a  fire  in 
the  TOX,  ECV,  BSA  or  other  area  is  entrained  in  the  exhaust  gases  entering 
the  filter  banks.  This  would  not  cause  a  fire  in  the  carbon  bed  because  the 
pre-filter  and  HEPA  filter,  located  upstream  of  the  carbon  beds,  would  stop 
the  spark.  These  filters  are  composed  of  noncombustible  fiberglass.  The 
fiberglass  would  not  achieve  the  melting  temperature  and  allow  the  spark  to 
pass  through  during  any  of  the  scenarios  evaluated. 

In  the  second  scenario,  the  hot  gases  exhausted  from  a  fire  in  the 
TOX,  ECV,  BSA,  or  other  area  or  from  a  failure  in  the  LIC  ductwork,  allowing 
exhaust  gases  from  the  operating  LIC  to  enter  the  LIC  room  would  heat  the 
carbon  bed.  Based  on  the  configuration  of  a  CAMDS-type  carbon  bank,  the 


TABLE  13.  SUMMARY  OF  ECV  AREA  FIRE  CALCULATIONS  (TON  CONTAINEr/^^ 

Carbon  Capacity  Varied 


Agent 

Fire  Size/ 
Coebustion 
Efficiency 
(sq.  ft./«) 

Carbon  Capacity 
(lb  agent/ 
lb  carbon} 

Tito  to  Release 
>0.001  lb  Agent 
(Min.) 

Agent  Released 
After  6  Minutes 
(lbs.) 

Agent  Released 
After  Maxieue 

Firs  Duration 
(lbs.) 

Maxieue  Fire 

Duration  with  99X 
Probabi 1 ity  of 
Operator  Closing 
Daeper  (Min.) 

HO 

Il/IM 

0.2 

4 

0.0016 

0.0091 

16 

HD 

11/iai 

0.0S 

4 

0.0022 

0.0208 

16 

H0(« 

7/IB0 

0.2 

>  60 

<  0.0001 

<  0.0001 

21 

HO  O’) 

7/100 

0.0S 

4S 

<  0.0001 

0.0001 

21 

GS 

11/100 

0.2 

3 

0.0072 

0.0438 

16 

G8 

11/100 

0.0S 

2 

0.0118 

0.1780 

16 

GB 

7/100 

0.2 

42 

<  0.0001 

0.0004 

22 

G8  ('*5 

7/100 

0.0S 

19 

<  0.0001 

0.0016 

22 

VX 

7/100 

0.2 

>  60 

<  0.0001 

<  0.0001 

14 

VX 

7/100 

0.0S 

>  d0 

<  0.0001 

<  0.0001 

14 

vxCb) 

S/100 

0.2 

>  60 

<  0.0001 

<  0  0001 

16 

vxO-) 

S/100 

0  0S 

>  60 

<  0.0001 

<  0  0001 

16 

(i)  Gis  teiperiture  at  filter  inlet  calculated  free  heat  balances.  The  residence  tise  of  the  fire  products  m  the 
ECV  area  s  1  second,  lorst-case  fire  size/coabustion  efficiencjr  coebinations  shown 

(b)  Saae  as  in  (a)  except  the  residence  tiee  of  the  fire  production  in  the  ECV  area  w  21.1  seconds 
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TABLE  14.  SUMMARY  OF  ECV  AREA  FIRE  CALCULATIONS  (TON  CONTAINER)' 
Filter  Inlet  Gas  Temperature  Varied 


(a) 


Usiitui  Fir* 


Agant 

Fir*  Six*/ 
Coabuatien 
Efficiancy 
(aq.  ft./*) 

Filtar  Inlat  Gaa 
Taaparatur* 

(F) 

Tia*  to  Ralaaa* 

>0.N1  lb  Agant 
(Min.) 

Agant  Ralaaaad 
Aftar  6  Mi nut** 
(Iba.) 

Agant  Ralaaaad 
Aftar  Haiiaua 
Fira  Duration 
(Iba.) 

Duration  with  99* 
Probability  of 
Oparator  Cloaing 
Oaapar  (Hin.) 

HO 

11/lN 

IN 

29 

<  0.0N1 

0.0N1 

16 

HD 

11/lH 

116 

4 

0.N22 

0.0206 

16 

HoCk) 

7/lM 

IN 

69 

<  0.0001 

<  0.0N1 

21 

HO(^) 

7/lM 

103 

46 

<  0.N01 

<  0.0061 

21 

G8 

11/lM 

IN 

16 

<  0.0001 

0.0013 

16 

G8 

U/IM 

117 

2 

0.0016 

0.1780 

16 

Cflft) 

7/lN 

IN 

32 

<  0.0N1 

0.N02 

22 

ob(« 

7/lN 

106 

19 

<  O.0N1 

<  0.N01 

22 

vx 

7/lM 

IN 

>  N 

<  0.0N1 

<  0.0N1 

14 

vx 

7/101 

120 

>  60 

<  0.0N1 

<  0.0N1 

14 

vx(b) 

6/100 

100 

>  N 

<  0  .N01 

<  0.0001 

16 

Vx(b) 

6/100 

117 

>  N 

<  0.0001 

<  0.0001 

16 

(t)  Ctrbon  eipcity  ■  >.15  lb  ig*nt/lb  carbon.  Th*  r«*i4*nc*  ti**  of  tho  firo  product*  in  tho  ECV  araa  ■  1  tacond. 
■orst'Cas*  fir*  siz*/co*buation  afficiancy  coabinatien*  ahoan. 


(b)  Sana  a*  in  (a)  aacapt  th*  raaidanc*  tia*  of  th*  fir*  product*  in  th*  ECV  araa  ■  21.1  aacond*. 
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TABLE  15.  ECV  AREA  FIRE  WORST  CASE/MOST  CREDIBLE  CASE  AGENT  RELEASES 


■QRST  CASE 


(•) 


Agont 

Fira  Sizo 
(aq.  ft.) 

Coabuatien 

Effieioncy 

(*) 

Tiao  to  lUloaao 
>6.N1  lb  Agont 
(yin.) 

Agmt  Ralaaaod 
After  S  Minutoa 

(•b«  ) 

Agont  Rolaaaod 
After  Maaiaua 

Firo  Duration 
(Iba.) 

Maaiaua  Fira 
Duration  with  66X 
Probability  of 
Operator  Cloaing 
Daapor  (Min.) 

HD 

11 

IN 

6 

<  6.6N1 

6.6162 

16 

G8 

11 

IN 

7 

6.6N2 

6.6866 

16 

VX 

7 

IN 

>  66 

<  6.6661 

<  6.6061 

14 

HOST  CRSJIBLE  CASE^^^ 

Agont 

Firo  Sizo 
(aq.  ft.) 

Coabuation 

Efficiency 

C*) 

Tiao  to  Rolaaso 
>6.N1  lb  Agont 
(Win.) 

Agent  Roleaaod 
After  6  Minutoa 
(Iba.) 

Agont  Raloaaod 
After  Maaiaua 

Fira  Duration 
(Iba.) 

Maaiaua  Firo 
Duration  with  666 
Probability  of 
Operator  Closing 
Daapor  (Min.) 

HO 

11 

IN 

11 

<  6.N61 

6.6635 

16 

CB 

11 

160 

6 

<  6.6661 

6.6146 

16 

VX 

7 

161 

>  66 

<  6.6661 

<  6.6661 

16 

(i)  Cirben  capacity  *  f.lS  lb  agant/lb  carbon,  filtor  inlot  gaa  toaporaturo  calculated  froa  boat  balancas. 

raaidanca  tiao  of  tha  fira  producta  in  tho  GCV  area  ■  1  aacond. 

(b)  Carbon  capacity  ■  1.2  lb  agont/lb  carbon,  filtor  inlot  gas  taaparatura  calculated  froa  boat  balancaa. 
raaidanca  tiao  of  tba  firo  producta  in  tbo  GCV  area  ■  ono  aocond. 
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minimum  Ignition  temperature  of  the  carbon  was  estimated  to  be  230  F  (See 
Appendix  A,  pages  A42  through  A44).  Raising  the  temperature  of  the  carbon 
beds  to  230  F  or  more  could  cause  an  Ignition  If  sufficient  time  1s  allowed. 
To  determine  the  sensitivity  of  temperature/tlme  on  carbon  Ignition,  the 
worst-case  filter  Inlet  gas  temperatures  from  the  TOX,  BSA  and  ECV  Area 
fires  were  evaluated.  The  results,  given  In  Table  16,  Indicate  that 
spontaneous  Ignition  Is  unlikely  because  of  the  short  exposure  periods  of 
the  carbon  filter  to  elevated  temperatures.  No  other  scenarios  for 
potential  carbon  Ignition  were  Identified. 

3.1.5  Aqent  Feed  to  Nonoperatlna  LIC.  This  scenario  Involves  the 


following  sequence  of  events: 

(1)  Shutdown  of  LIC  burners/combustion  air  blowers  while 
continued  agent  feed  Into  the  hot,  but  nonoperating  LIC 

(2)  Closure  of  the  LIC  exhaust  damper,  thereby  Isolating  the  LIC 
from  the  PAS 

(3)  Vaporization  of  agent  fed  Into  the  LIC  as  a  result  of  contact 
with  the  hot  refractory  lining.  There  Is  a  slight  pressure 
buildup  In  the  LIC  until  agent  Is  vented  Into  the  LIC  room, 
probably  through  the  combustion  air  blower.  The  exhausted 
agent  Is  then  transported  to  the  filter  system  via  the 
ventilation. 

The  amount  of  agent  released  versus  length  of  time  that  agent  Is 
fed  Into  the  nonoperating  LIC  was  calculated.  An  agent  flow  rate  Into  the 
LIC  at  a  constant  rate  of  17.5  Ib/mln  for  HD  and  GB  and  11.7  Ib/mln  for  VX 
was  assumed  as  a  worst  case  for  the  calculation.  The  previous  fire 
scenarios  Indicated  that  the  filter  Inlet  gas  temperature  had  a  significant 
Impact  on  the  amount  of  agent  released.  As  such,  the  temperature  of  the 
agent  exhausted  from  the  LIC  was  varied  by  changing  the  amount  of  refractory 
Inside  the  LIC  that  Is  used  to  vaporize  and  heat  the  agent.  These 
calculations  are  given  In  Appendix  A,  pages  A45  through  A49.  Results  of  the 
calculations,  given  In  Table  17,  Indicate  that  an  operator  has  about  33 
minutes  to  stop  the  agent  feed  Into  the  nonoperating  LIC  before  the  agent 
release  exceeds  0.001  lb. 


m 


SIP 


TABLE  16.  TIME  REQUIRED  FOR  SPONTANEOUS  IGNITION 
OF  CARBON  DUE  TO  HEATING 


Scenario 

Agent 

Maximum 

T  at  Filters, 
®F 

Time  to  Ignition 
of  Activated  Carbon 

Fire  Duration 
in  Scenario, 
min. 

TOX  Fire^*^ 

HD 

154 

(b) 

76  min 

TOX  Fire 

GB 

151 

(b) 

77  min 

TOX  Fire 

VX 

148 

(b) 

187  min 

BSA  Fire^®^ 

HD 

305 

80  min 

8  min 

BSA  Fire 

GB 

296 

85  min 

6  min 

BSA  Fire 

VX 

287 

100  min 

17  min 

ECV  Fire^*^ 

HD 

167 

(b) 

14  min 

ECV  Fire 

GB 

164 

(b) 

12  min 

ECV  Fire 

VX 

162 

(b) 

29  min 

Lic(c) 

All 

230 

>9  hrs 

(a)  All  worst-case  values  given  here 

(b)  Below  minimum  temperature  required  for  ignition. 

(c)  LIC/AB  exhausts  into  LIC  area. 
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TABLE  17.  AGENT  RELEASE  FROM  CARBON  FILTERS  WHILE  CONTINUED 
AGENT  FEED  INTO  NON-OPERATING  LIC 


Agent 

Fraction  of  LIC 
Refractory  that 
Heats  Agent 

Time  to  Release 
>0.001  lb  Agent 
(Min.) 

Agent  Released 
After  5  Minutes 
(lbs.) 

Agent  Released 
After  20  Minutes 
(lbs.) 

HD 

33 

<  0.0001 

<  0.0001 

HD 

0.1 

(b) 

<  0.0001 

<  0.0001 

GB 

1.0 

33 

<  0.0001 

<  0.0001 

GB 

0.1 

(b) 

<  0.0001 

<  0.0001 

VX 

1.0 

>  60 

<  0.0001 

<  0.0001 

VX 

0.1 

(b) 

<  0.0001 

<  0.0001 

(a)  1.0  implies  that  the  entire  inner  layer  of  high  conductivity  refractory 
(4-1/2-inch  thick)  within  the  volatilization  chamber  (52  inches  ID  by 
7-ft.  ht.)  is  available  to  volatilize  agent  fed  into  the  LIC. 


(b)  The  refractory  cools  to  below  the  boiling  point  before  <0.001  lb. 
is  released. 


3.1.6  Carbon  Filter  Desorption.  A  telephone  conversation  with 
Dr.  Gerry  Wood  of  the  Air  Purification  Branch  at  the  Chemical  Research 
Development  and  Engineering  Center  revealed  a  general  lack  of  agent 
desorption  data.  The  desorption  process  cannot  yet  be  modeled  by  empirical 
correlations.  However,  in  qualitative  terms,  desorption  may  be 
insignificant.  A  report  was  cited  (Reference  1)  in  which  no  GB  or  GD  was 
desorbed  after  purging  a  carbon  filter  for  30  days  at  ambient  temperature. 


3.1.7  PAS  Agent  Scrubbing.  The  potential  for  agent  removal  in 
the  PAS  quencher  was  evaluated.  The  LIC  PAS  was  used  as  the  basis  for  the 
calculations.  The  calculations  are  given  in  Appendix  A,  pages  A50  through 
A56. 

The  equations  used  to  estimate  agent  scrubbing  efficiency  in  the 
quencher  indicated  a  strong  dependence  on  the  droplet  size  emitted  from  the 
quencher  spray  nozzle.  Based  on  designed  flow  rates,  the  nozzles  in  the 
quencher  should  result  in  a  median  particle  diameter  of  1000  microns  or 
less.  A  diameter  of  4000  microns  (worst  case)  and  100  microns  (optimistic 
case)  were  also  evaluated.  The  effect  of  gas  residence  time  in  the  quencher 
was  also  evaluated  ranging  from  2.0  seconds  (worst  case)  to  4.0  seconds 
(optimistic)  as  well  as  the  2.9  second  designed  residence  time. 

The  results  of  the  calculations  are  summarized  in  Table  18. 

The  worst  case  agent  removal  efficiency  (4000  micron  particle  size,  2.0 
second  residence  time)  was  about  50  percent  while  the  most  optimistic  (100 
micron  particle  size,  4.0  second  residence  time)  was  over  99.999  percent. 

The  most  credible  removal  efficiency  (1000  microns  particle  size,  2.9  second 
residence  time)  was  68.7  percent. 

3.1.8  MPF/Full  TC.  The  MPF  accident  that  was  evaluated  involves 
inadvertent  processing  of  a  full  TC  in  the  MPF.  It  was  assumed  that  the  MPF 
burners  would  remain  in  operation  after  the  TC  was  placed  in  the  MPF  (i.e., 
plant  personnel  were  unaware  that  a  full  TC  was  placed  in  the  MPF).  Several 
scenarios  were  evaluated  for  this  accident.  Scenario  3  is  considered  to  be 
the  worst  case. 

In  scenario  1,  the  agent  volatilizes  from  the  TC  through  punched 
holes  at  a  rate  dependent  on  the  MPF  burners  heat  duty.  Sufficient  area  is 


available  In  the  punched  holes  so  as  to  prevent  over-pressurization  of  the 
TCs.  Assumptions  used  in  scenario  1  calculations  include: 

•  A  single  TC  placed  in  the  MPF  inadvertently 

•  Agent  burns  in  the  TC  but  container  does  not  rupture 

•  Combustion-quench  air  at  3690  Ib/hr  in  MPF 

•  Agent  is  at  120  F  when  placed  in  the  MPF 

•  MPF  operates  at  1600  F 

•  Thermal  input  to  TC  is  1,745,953  Btu/hr  (Radiation  and 
Convecti on) . 

The  calculations  are  given  in  Appendix  A,  pages  A58  through  A63. 
The  agent  flow  rates  from  the  MPF  to  the  afterburner  resulting  from  scenario 
1  are  shown  in  Table  19.  The  "agent  not  combusted",  shown  in  Table  19, 
represents  the  amount  of  agent  in  Ib/min  not  combusted  in  the  MPF  under 
stoichiometric  conditions.  These  values  are  reasonable  considering  the  fact 
that  the  MPF  was  designed  to  burn  only  residual  agent  on  various  metal  parts 
and  one  TC.  The  agent  not  combusted  in  the  .MPF  will  flow  into  the  after 
burner  via  the  MPF  exhaust  flow  and  will  be  thermally  decomposed  there  if 
the  afterburner  continues  to  function,  normally  with  a  2-second  residence 
time  for  MPF  exhaust.  As  such,  no  significant  agent  release  to  the 
environment  would  result  during  this  scenario.  Also,  as  described  in  the 
calculations  (Appendix  A),  an  agent  vapor/air  explosion  should  not  be 
possible  due  to  the  limited  amount  of  oxygen  available  in  the  MPF. 

In  scenario  2,  the  TC  would  rupture  when  heated  in  the  MPF  due  to 
over-pressurization.  The  contents  of  the  container  would  be  ejected  to  the 
floor  of  the  MPF.  All  of  the  agent  is  not  vaporized  instantly  but,  rather, 
the  vaporization  rate  is  dependent  on  the  rate  of  heat  transfer  by 
conduction  from  the  refractory  to  the  agent.  Assumptions  used  in  scenario  2 
calculations  are  as  follows: 

•  The  agent  does  not  vaporize  instantly  and  it  is  concentrated  on 
the  floor  area 

•  Heat  transfer  to  agent  is  primarily  by  conduction  through  the 
floor  refractory 


TABLE  19.  TIMES  TO  VAPORIZE  AGENT  FROM  ONE  TON  CONTAINER  PLACED  IN  MPF 


Agent  Time  Mass  Mass  Vapor 

Liq  Vapor  Flow 

(min)  (lb)  (lb)  (cfm) 


Mass 

of 

Agent 

Comb 

(Ib/min) 


Mass  of  Agent 
not  Combusted 
(Ib/min)  to 
Afterburner 


Wi 

m 


S 


•  4.5-1n  of  refractory  with  high  thermal  conductivity  contributes 
to  heat  flux  Into  the  liquid 

•  Agent  spills  at  the  boiling  point 

•  Thermal  conductivity  of  the  4.5-1n  refractory  slab  Is  2.6 
Btu/hr-ft-F 

•  Average  slab  temperature  is  1600  F. 

The  calculations  are  given  1n  Appendix  A,  pages  A67  through  A77. 
The  agent  flow  rates  from  the  MPF  to  the  afterburner,  summarized  In  Table 
20,  Indicate  that  no  significant  agent  release  to  the  environment  would 
occur  during  this  scenario.  These  flows  should  be  easily  combusted  In  the 
afterburner  since  the  residence  time  will  be  higher  than  normal  without  full 
MPF  combustion  exhaust.  Since  the  flow  capacity  for  the  24-1n-d1ameter  duct 
is  approximately  2500  scfm  at  the  nominal  2  Iwg  pressure  differential 
between  the  MPF  and  afterburner,  there  will  be  no  pressure  rise  In  the  MPF 
at  these  conditions. 

In  scenario  3,  the  TC  ruptures  and  the  entire  contents  are 
Instantly  vaporized.  The  agent  flow  rates  from  the  MPF  to  the  afterburner, 
the  afterburner  destruction  efficiencies  (the  afterburner  was  assumed  to 
flame  out  due  to  the  large  spike  of  agent  vapor)  and  the  amounts  of  agent 
released  to  the  environment  are  given  In  Table  21.  The  calculations  are 
given  In  Appendix  A,  pages  A76  through  A90.  This  scenario  assumes,  as  a 
worst  case,  that  the  entire  agent  Is  vented  through  the  afterburner. 

However,  because  of  the  over-pressure  resulting  from  the  vaporization  of  the 
agent,  the  MPF  fume  containment  would  be  compromised,  thereby  expelling 
agent  Into  the  MPF  area.  Table  22  Indicates  that  over-pressures  that  would 
likely  cause  MOB  structural  failure  can  occur  If  as  little  as  one-fourth  of 
the  contents  of  a  TC  were  expelled  to  the  MPF  room  In  this  manner.  Because 
two  of  the  MPF  walls  are  located  adjacent  to  the  outside,  essentially  all  of 
the  agent  Involved  could  be  released  to  the  environment.  Any  combination  of 
variables  could  result  In  a  significant  agent  release  to  the  environment  due 
to  the  large  over-pressures.  Although  not  quantitatively  estimated, 
scenario  3  could  result  In  the  essentially  Instantaneous  release  of  hundreds 
of  pounds  of  agent  to  the  environment. 


TABLE  20.  AGENT  VAPORIZATION  RESULTING  FROM  AGENT 
SPILLS  ON  HOT  MPF  FLOOR 


Agent 

Mass  Agent  Vapor 
Released 
(Ibm) 

Volume  Agent 
Vapor 
(cu  ft) 

Time 

(min) 

Ventilation  Rate 
Requi red 
(cfm) 

HD 

1700 

14070 

16 

879 

850 

7517 

8.2 

916 

425 

3896 

4.1 

950 

VX 

1500 

7568 

9.7 

780 

750 

3996 

4.8 

832 

375 

2058 

2.4 

858 

GB 

1600 

14952 

14.2 

1053 

800 

8008 

7.1 

1128 

400 

4156 

3.5 

1187 

Table  21.  Instantaneous  Vaporization  of  Agent  in  MPF 
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Sensitivity  analyses  were  performed  for  several  accident  scenarios 


involving  relatively  large  quantities  (i.e.  over  100  pounds)  of  agent.  A 
summary  of  agent  releases  for  the  accident  scenarios  evaluated  are  given  in 
Table  23.  Other  conclusions  are  as  follows: 


•  Insufficient  information  is  available  to  quantify  desorption 
of  agent  from  carbon  filters. 

•  Between  50  (worst-case)  and  99.999  (most-credible-case)  percent 
removal  efficiencies  of  agent  are  anticipated  in  the  PAS 
quencher. 
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TABLE  23.  SUMMARY  OF  AGENT  RELEASES  FROM  ACCIDENT  SCENARIOS  EVALUATED 

IN  THE  SENSITIVITY  ANALYSES 


Scenario 

Worst-Case 

Agent  Release 
Agent  (lbs) 

Most-Credible-Case 
Agent  Release 
(lbs) 

TOX  Area  Fire 

HD 

0.2814 

0.0050 

GB 

6.4324 

0.1613 

VX 

<  0.0001 

<  0.0001 

BSA  Area  Fire(b) 

HD 

75.2408 

6.8254 

GB 

168.7586 

28.8833 

VX 

0.1391 

<  0.0001 

BSA  Area  Fire(c) 

HD 

0.0004 

— 

GB 

0.3593 

— 

VX 

<  0.0001 

— 

ECV  Area  Fire 

HD 

0.0288 

0.0001 

GB 

0.1788 

0.0016 

VX 

<  0.0001 

<  0.0001 

Carbon  Filter  Fire 

HD 

(d) 

(d) 

GB 

(d) 

(d) 

VX 

(d) 

(d) 

Agent  Feed  to  non¬ 

HD 

<  0.0001 

<  0.0001 

operating  Lie 

GB 

<  0.0001 

<  0.0001 

VX 

<  0.0001 

<  0.0001 

Feed  Full  TC  into  MPF 

HD 

<  0.0001 

(Scenarios  1  and  2) 

GB 

<  0.0001 

— 

VX 

<  0.0001 

— 

Feed  Full  TC  into  MPF 

HD 

>  100 

(Scenario  3) 

GB 

>  100 

VX 

>  100 

— 

(a)  Agent  releases  for  the  fire  scenarios  are  for  the  maximum 
fire  duration. 

(b)  The  agent  releases  given  here  are  for  a  leaking  TC. 

(c)  The  agent  releases  given  here  are  for  a  ruptured  TC  and 
assumes  agent  release  from  a  sump  fire. 

(d)  Ignition  of  the  carbon  is  not  anticipated  in  any  of  the 
evaluated  scenarios. 


C.l.  STRUCTURAL  ANALYSIS 


This  appendix  summarizes  the  structural  analysis  methodology  used 
to  determine  failure  thresholds  and  probabilities  for  munitions  and 
structures.  Supporting  calculation  for  the  results  used  In  this  study 
can  be  found  In  Ref.  C-1. 


C.1.1.  PUNCTURE 

This  section  addresses  tuo  types  of  munition  puncture:  (1)  punc¬ 
ture  due  to  dropping  a  munition;  and  (2)  forklift  puncture. 

C . 1 . 1 . 1 .  Puncture  Due  to  Drop 

The  probability  Pp  of  a  munition  puncturing  on  Ic^jact  with  a  probe 
depends  on  the  type  of  munition*  the  number  of  probes  to  which  a  dropped 
munition  Is  exposed,  and  the  geometry  of  the  probe.  This  probability  Is 
cosqjuted  from  the  following: 

Pp  «  Pg  X  PLL  X  PD  X  Ag  , 

vdiere  Pg  «  probe  density  (number  of  probes  per  square  foot  of  surface 
area) , 

PLL  >  an  admissible  probability  value  for  probe  length  to  diameter 
ratio, 


PD  «  an  admissible  probability  value  for  probe  diameter. 


C-1 


Ag  *  the  area  of  the  munition  In  square  feet  t^lch  Is  subject  to 
penetration  by  the  probe. 

The  number  of  probes  per  square  foot  of  surface  area  (P3)  Is  based 
on  engineering  Judgment.  It  Is  assumed  that  the  Igloo  Is  clean  and  that 
objects  that  could  be  potential  probes  are  not  likely  to  be  left  In  the 
Igloo.  Therefore,  one  probe  per  Igloo  (l.e.,  one  probe  per  2160  ft^) 
was  assumed  for  Igloo  storage.  For  all  other  storage  areas,  a  probe 
density  of  one  per  1000  ft^  ms  assumed.  In  the  general  working  area, 
loading  docks,  etc..  It  Is  assumed  that  the  potential  for  probes  will  be 
much  more  likely  than  In  an  Igloo.  Probes  such  as  posts,  tools,  rocks, 
or  chunks  of  steel  are  possible;  therefore,  one  probe  per  100  ft^  Is 
assumed  for  the  general  working  area.  In  the  UPA  during  an  earthquake, 
It  Is  assumed  that  the  earthquake  could  generate  additional  probes  by 
causing  objects  to  fall  onto  the  floor;  therefore,  one  probe  per  50  ft^ 
Is  assumed  for  the  UPA  during  an  earthquake. 

The  PLL  term  In  the  above  expression  represents  the  probability 
that  the  probe  has  a  length-to-dlameter  ratio  (L/D)  which  Is  less  than 
that  which  would  cause  buckling  failure  of  the  probe  without  penetration 
of  the  dropped  munition  but  greater  than  that  corresponding  to  a  probe 
length  vdilch  Is  Insufficient  to  penetrate  the  munition.  Probe  dimen¬ 
sions  (diameter  and  L/D)  were  treated  statistically  and  the  minimum 
probe  length  for  penetration  was  calculated  for  each  munition. 

The  PD  term  In  the  above  expression  represents  the  probability 
that  the  diameter  of  the  probe  Is  less  than  or  equal  to  the  maximum  that 
could  penetrate  the  munition  but  greater  than  a  minimum  diameter  corres¬ 
ponding  to  the  compressive  strength  of  the  probe.  The  maximum  diameter 
of  the  probes  which  could  penetrate  through  the  munition  wall  Is  deter¬ 
mined  from 

(W  X  H)0*667 
*  672  t  ’ 
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'i^ere  ^  maximum  probe  diameter  (In.), 

W  *  weight  of  munltlon/pallet  (lb), 

H  »  drop  height  (ft), 
t  >  munition  thickness  (In.). 

These  expressions  are  taken  from  Ref.  C-2. 

The  munition  area  vulnerable  to  probe  penetration  (A^)  was  deter¬ 
mined  assuming  a  maximum  probe  length  of  2  In.  This  term  was  calculated 
for  each  munltlon/pallet  configuration  of  Interest  and  reflects  the  num¬ 
ber  of  munitions  Involved  In  each  handling  operation.  Thus,  If  more 
than  one  munition  were  being  handled,  the  vulnerable  area  of  each  muni¬ 
tion  was  multiplied  by  the  actual  number  of  munitions  Involved  In  the 
handling  event. 

C. 1.1.2.  Forklift  Tine  Puncture 

For  forklift  tine  puncture,  the  munitions  are  at  rest  and  the  probe 
(the  forklift  tine)  Is  the  moving  object.  This  makes  calculating  the 
munition  vulnerability  simpler  since  the  mass  of  the  moving  object  (the 
forklift)  and  the  shape  of  the  probe  (the  tine)  are  the  same  for  all 
munitions.  The  only  variable  Is  the  munition  thickness.  Since  the 
puncture  energy  Is  proportional  to  the  thickness  of  the  munition,  the 
relative  puncture  resistance  of  the  munitions  Is  simply  the  ratio  of  the 
thicknesses . 

The  probability  P  of  a  forklift  tine  puncture  of  the  munitions  was 
assumed  to  be  governed  by 

P  =  Pi  *  P2  *  N  , 

where  Pi  »  the  probability  that  a  munition  Is  struck  by  a  forklift  tine 
per  pallet  operation. 


P2  ■  the  probability  that  the  munition  Is  punctured  given  that  the 
forklift  tine  strikes  the  munition, 

N  «  number  of  handling  operations. 

The  critical  puncture  velocity  (In  ft/s)  was  determined  from 

Vc  «  ^  (672  Dt)3/2  , 

where  W  >  weight  of  the  forklift  (lb), 

D  >  equivalent  diameter  of  the  forklift  tine  (In.), 
t  >  munition  wall  thickness  (In.). 


C.1.2.  WIND-GENERATED  MISSILES 


The  probability  of  a  wind-generated  missile  rupturing  a  munition  Is 
the  product  of  two  probabilities:  (1)  the  probability  of  having  a  wind 
of  sufficient  velocity  to  generate  a  missile  that  can  rupture  a  munition 
and  (2)  the  probability  that  the  missile  hits  the  munitions  In  an  orien¬ 
tation  that  will  rupture  the  munition. 


C. 1.2.1.  Required  Wind  Velocity 


The  vrlnd  velocity  required  to  generate  a  missile  that  can  penetrate 
a  munition  Is  computed  as  follows: 


1.  The  missile  velocity  required  to  penetrate  the  munition  is 
computed  using  the  equation  (Ref.  C-2): 

»  0.682  ^  (672  Dt)3/2  , 

where  =  the  penetration  velocity  (mph), 

W  -  the  weight  of  the  missile  (lb), 

D  >  the  equivalent  missile  diameter  (In.), 
t  =  the  wall  thickness  of  the  munition  (in.). 

Each  munition  was  evaluated  for  two  critical  missiles:  a 
10-ft  section  of  3-in.  pipe  and  a  13.5-in.  diameter  utility 
pole.  In  addition  to  penetration,  the  utility  pole  was 
evaluated  to  determine  the  velocity  required  to  crush  the 
munition. 


The  missile  velocity  required  to  penetrate  the  storage 
structure  was  also  computed  using  the  following  equation 
(Ref.  C-2). 

For  concrete  structures: 

fe  T  d1-8 

V3  =  1000  ^ 

where  T  =  thickness  of  concrete  element  to  be  Just 
perforated  (ln.)( 

W  =  weight  of  missile  (lb), 

D  «  diameter  of  missile  (in.), 

Vg  =■  striking  velocity  of  missile  (fps), 

f^.  =  conq>ressive  strength  of  concrete  (psi). 

For  steel  structures: 
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Vg  .  0.682  —  (672  DT)3/2 

The  missile  velocity  required  to  penetrate  both  the  munition 
and  structure  is  computed  using  the  following  equation  \dilch 
is  based  on  summing  the  energies  required  to  penetrate  the 
munition  and  structure  separately: 

V  -  ^2  +  v2  . 

where  Vgj  *  velocity  required  to  penetrate  the  munition, 

Vg  ■  velocity  required  to  penetrate  the  structure. 

The  probability  of  the  required  wind  occurring  was  based  on 
functional  data  for  each  site. 


C. 1.2.2.  Probability  of  Hitting  and  Rupturing  the  Munition 

Given  a  sufficient  wind,  the  probability  that  a  missile  hits  and 
ruptures  a  nunltlon  was  confuted  from: 

P  -  Pd  Po  D  A  , 

where  P^j  >  probability  that  the  direction  of  missile  travel  is  nearly 
perpendicular  to  the  target, 

Pq  >  probability  that  the  missile  is  oriented  to  penetrate  (l.e., 
not  tumbling  or  going  sideways), 

D  >  number  of  missiles  per  unit  area, 

A  *  area  of  target. 

Values  for  P^i  Pq,  and  D  are  difficult  to  evaluate  and  are  not  available 
from  the  literature.  Consequently,  the  values  used  for  the  analysis 
were  computed  based  on  engineering  Judgment.  These  values  were  selected 
to  give  a  "best  estimate"  of  the  overall  probability.  The  following  is 
a  discussion  of  these  assumptions. 

The  missile  velocity  must  be  nearly  perpendicular  to  the  wall  of  a 
structure  or  munition  in  order  for  the  missile  to  penetrate.  The  fur¬ 
ther  the  missile  strikes  from  an  angle  which  is  perpendicular,  the  less 
likely  that  the  missile  will  penetrate.  As  the  angle  deviates  from  the 
perpendicular,  the  effective  thickness  of  munition  Increases  propor¬ 
tionally  to  the  reciprocal  of  the  cosine  of  the  angle  (where  the  angle 
is  measured  from  the  perpendicular);  thus,  a  higher  missile  velocity 
(which  has  a  lower  probability  of  occurring)  is  required  for  penetra¬ 
tion.  In  addition,  the  missile  is  more  likely  to  ricochet  at  higher 
angles.  Based  on  engineering  Judgment,  it  is  estimated  that  if  the 


missile  velocity  Is  more  than  30  deg  off  from  perpendicular,  the  missile 
will  not  penetrate.  This  yields  a  value  of  0.17  for  P^]. 

The  missile  velocity  must  be  aligned  along  the  missile  axis  In 
order  for  the  missile  to  penetrate.  In  other  words,  the  missile  must 
move  like  an  arrow  rather  than  tumbling  or  going  sideways.  Of  the  two 
missiles  analyzed,  It  was  found  that  It  Is  more  Important  that  the  pipe 
be  aligned  properly  than  the  utility  pole  because  of  the  larger  lnq>act 
area  of  the  utility  pole.  For  this  reason,  it  was  assumed  that  the 
velocity  must  be  aligned  within  5  deg  of  the  axis  of  the  pipe  and  within 
10  deg  of  the  axis  of  the  utility  pole.  These  assun^tlons  resulted  In 
values  for  of  O.OOA  for  the  pipe  and  0.015  for  the  utility  pole. 

The  path  of  the  tornado  Is  generally  from  1/8  to  3/4  of  a  mile 
wide  (Ref.  C-3).  For  this  analysis.  It  was  assumed  that  the  tornado 
is  1/2  mile  wide  and  that  it  carries  one  utility  pole  and  10  Iron  pipes. 
It  was  further  assumed  that  the  pipes  are  evenly  distributed  to  a  height 
of  50  ft  and  the  utility  pole  at  a  height  of  20  ft  (Ref.  C-4  Indicates 
the  maximum  heights  for  pipes  Is  100  ft  and  for  utility  poles  Is  50  ft 
vdilch  Indicates  that  our  assumption  Is  conservative).  Therefore,  the 
number  of  missiles  per  square  foot  of  wind  (D)  Is  7.6  x  10~^  for  pipes 
and  1.9  x  10"^  for  utility  poles. 

The  target  area  Is  different  for  each  scenario  and  depends  on 
the  number  of  munitions  Involved  and  the  storage  configuration  (see 
Ref.  C-1). 

The  product  of  Pj,  Pq,  and  D  is  approximately  5.0  x  10“®  for  both 
the  pipes  and  utility  pole. 


C.1.3.  EARTHQUAKE  AND  WIND  FAILURE  OF  UBC  DESIGNED  STRUCTURES 


C. 1.3.1.  Strength  Factor  of  Safety 


The  Uniform  Building  Code  (UBC)  ensures  that  structures  are 
designed  with  a  factor  of  safety.  This  factor  of  safety  varies  depend¬ 
ing  on  the  type  of  structure,  materials  used  and  components  selected. 

For  earthquake  and  wind  loads,  this  factor  of  safety  ranges  from  1.3 
to  1.6  for  concrete  structures  designed  to  ultimate  design  strength 
principals  and  from  2.6  to  3.0  for  concrete  and  steel  structures 
designed  to  working  stress  methods.  For  the  risk  analyses  In  this 
report.  It  Is  assumed  that  the  factor  of  safety  will  be  1.3  for  concrete 
structures  (since  the  CONUS  structures  are  being  designed  to  ultimate 
strength)  and  2.6  for  the  steel  structures. 


C. 1.3.2.  Wind  Loads 


For  UBC-deslgned  concrete  structures  such  as  the  MDB,  wind  does  not 
govern  the  design  of  the  main  structural  consonants.  The  MDB  Is  a  rigid 
concrete  moment  resisting  framed  and  shear  wall  structure  and  will  fall 
under  seismic  conditions  only.  For  the  steel  structures  such  as  the 
bulk  agent  warehouses,  the  wind  governs  the  design  In  most  cases.  Wind 
loads  will  fall  the  walls  of  the  structure  before  the  structure  will 
collapse.  Since  the  stresses  In  a  structure  due  to  winds  are  propor¬ 
tional  to  the  square  of  the  wind  velocity,  a  wind  velocity  which  Is  1.6 
(square  root  of  the  2.6  factor  of  safety  on  strength)  times  greater  than 
the  design  wind  load  can  be  expected  to  fall  the  walls  of  the  steel 
structure. 


C.  1.3.3.  Earthquake  Loads 


The  Applied  Technology  Council  (ATC),  which  Is  associated  with  the 
SEAOC,  presents  a  set  of  curves  that  can  be  used  to  estimate  the  proba¬ 
bility  of  an  earthquake,  which  exceeds  a  specific  g- level,  occurring 


anywhere  In  the  U.S.  (Ref.  C-5).  These  curves  arc  shown  in  Fig.  C-1. 
Each  curve  represents  a  seismic  map  area  which  is  similar  to  the  seismic 
zones  used  by  the  UBC.  The  ATC  divided  the  country  into  seven  seismic 
map  areas  (1-7).  The  UBC  uses  five  seismic  zones  (0-4).  Reference  C-5 
contains  maps  showing  the  seismic  map  areas.  These  maps  color  code  the 
seismic  map  areas,  and,  consequently,  have  not  been  reproduced  for  this 
report  since  a  black  and  vdiite  reproduction  would  not  be  helpful.  The 
maps  show  that  AFG,  ANAD,  LBAO,  PBA,  UMDA,  and  PUDA  are  in  seismic  map 
area  2;  NAAP  is  in  seismic  map  area  3;  and  TEAD  is  in  seismic  map 
area  5. 

Figure  C-1  presents  the  seismic  risk  curves  for  seismic  map 
areas  2,  3,  5,  and  7. 

The  earthquake  g-level  that  will  fall  a  structure  depends  on  four 
principal  factors:  (1)  the  design  g-level,  (2)  the  strength  factor  of 
safety,  (3)  the  dynamic  amplification  in  the  structure,  and  (4)  the  duc¬ 
tility  of  the  structure.  The  dynamic  amplification  factor  reduces  the 
factor  of  safety,  and  the  ductility  Increases  the  factor  of  safety.  The 
dynamic  amplification  factor  has  been  conservatively  estimated  at  2.3 
based  on  a  referenced  analysis  (Ref.  C-6).  Ductility  factors  are  esti¬ 
mated  to  be  in  the  range  of  2.5  to  3.5  for  concrete  structures  with 
shear  walls  and  from  3.5  to  5.0  for  steel  structures.  For  this  anal¬ 
ysis,  2.5  was  used  for  concrete  walls  and  3.5  was  used  for  steel-walled 
structures.  Based  on  these  factors,  a  UBC  structure  with  concrete  walls 
was  assumed  to  fail  at  an  earthquake  g-level  that  is  approximately  1.4 
times  the  design  g-level,  and  a  UBC  structure  with  steel  walls  was 
assumed  to  fail  at  a  g-level  that  is  approximately  4.0  times  greater 
than  the  design  g-level. 

For  UBC  designed  structures  with  concrete  walls  in  Seismic  Zone  3 
(design  g-level  of  0.14),  the  expected  failure  g-level  is  0.4  g.  Due 
to  the  uncertainty  of  the  analysis,  there  is  a  probability  that  the 
structure  will  survive  larger  earthquakes  or  will  fall  during  smaller 


earthquakes.  Consequently,  the  following  probabilities  of  failure  have 
been  assumed: 

1.  A  0.3-g  earthquake  has  a  0.1  probability  of  producing  failure. 

2.  A  0.4-g  earthquake  has  a  0.5  probability  of  producing  failure. 

3.  A  0.5-g  earthquake  has  a  0.9  probability  of  producing  failure. 

A.  A  0.6-g  earthquake  has  a  1.0  probability  of  producing  failure. 

The  failure  g-levels  for  Seismic  Zone  2  are  half  of  the  g-levels  for 
Seismic  Zone  3  since  the  design  g-level  for  Seismic  Zone  2  (0.07  g)  is 
half  the  design  g-level  for  Seismic  Zone  3  (O.IA  g). 

For  UBC  designed  structures  with  steel  walls  in  Seismic  Zone  2  (the 
warehouses  at  NAAF  and  UMDA) ,  the  follovrlng  probabilities  of  failure 
have  been  assumed: 

1.  A  0.2-g  earthquake  has  a  0*1  probability  of  producing  failure. 

2.  A  0.3-g  earthquake  has  a  0.5  probability  of  producing  failure. 

3.  A  0.4-g  earthquake  has  a  0*9  probability  of  producing  failure. 

4.  A  0.5-g  earthquake  has  a  1.0  probability  of  producing  failure. 


C.l.A.  EARTHQUAKE  FAILURE  OF  NRC-DESIGNED  STRUCTURES 


The  TOX  cubicle,  tank,  and  piping  system  will  be  designed  to 
Nuclear  Regulatory  Commission  (NRC)  standards  for  nuclear  power  plants. 
In  summary,  this  will  Involve  the  following: 

1.  Seismic  experts  will  determine  the  "maximum  credible  earth¬ 
quake"  that  can  occur  at  TEAD  based  on  the  seismic  history  of 
the  area  and  the  proximity  of  earthquake  faults.  This  "maxi¬ 
mum  credible  earthquake"  will  be  selected  as  the  safe  shutdown 
earthquake  (SSE)  to  be  used  as  the  design  earthquake  for  the 
TOX  at  all  eight  sites. 

2.  The  TOX  will  be  analyzed  for  the  SSE  using  finite-element 
time-history  computer  programs. 

3.  The  TOX  will  be  constructed  to  NRC  standards. 

Since  the  SSE  for  TEAD  has  not  been  selected,  an  SSE  g-level  had  to  be 
assumed  for  this  risk  analysis.  The  SSE  selected  by  the  seismic  experts 
for  TEAD  is  expected  to  be  between  0.3  and  0.5  g.  For  this  risk  anal¬ 
ysis,  It  was  conservatively  assumed  that  the  TOX  will  be  designed  for  a 
0.3-g  SSE. 

Since  the  TOX  will  be  designed  for  no  failures  in  the  event  of  a 
SSE,  an  earthquake  larger  than  the  SSE  will  be  required  to  produce  a 
failure.  Since  the  NRC  seismic  design  requirements  are  quite  different 
from  the  UBC  seismic  requirements,  the  methodology  used  to  determine 
failure  g-levels  for  the  UBC  structures  does  not  apply  to  NRC-deslgned 
structures.  Based  on  GA’s  experience  in  seismic  design  of  nuclear  power 
plants,  it  was  estimated  that  an  earthquake  which  Is  twice  the  SSE  will 
have  a  0.5  probability  of  either  rupturing  the  TOX  tank/plplng  system 
or  breaching  the  TOX  wall.  There  is  a  possibility  that  the  TOX  will 
survive  larger  earthquakes  or  that  a  smaller  earthquake  will  cause  a 


failure.  Consequently,  the  following  probabilities  are  selected  for  the 
rupture  of  the  TOX  storage  tank  and  for  the  breaching  of  the  TOX  walls: 

1.  A  0.5-g  earthquake  has  a  0.1  probability  of  producing  failure. 

2.  A  0.6-g  earthquake  has  a  0.5  probability  of  producing  failure. 

3.  A  0.7-g  earthquake  has  a  0.9  probability  of  producing  failure. 

4.  A  0.8-g  earthquake  has  a  1.0  probability  of  producing  failure. 


C.1.5.  METEORITES 


The  probability  of  a  meteorite  penetrating  a  munition  can  be  esti¬ 
mated  from: 

P  *  F  (fi  +  fg)  A  S  , 

\d:ere  F  =  frequency  of  meteorite  strikes  per  square  foot  of  area, 

fj[  »  fraction  of  the  striking  meteorites  which  are  Iron  meteorites 
and  can  penetrate  the  target, 

fg  ==  fraction  of  the  striking  meteorites  which  are  stone  meteor¬ 
ites  and  can  penetrate  the  target, 

A  =  area  of  target, 

S  fraction  of  the  target  area  which  must  be  lnq>acted  to  rupture 
a  munition  or  bulk  agent  container  (spacing  factor). 

The  frequency  of  meteorite  strikes  for  meteorites  1.0  lb  or  greater 
Is  O.A  X  10"^3/ft2  (Ref.  C-7).  For  small  meteorites  (a  ton  or  less), 
stone  meteorites  are  approximately  10  times  more  common  than  Iron  mete¬ 
orites  (Ref.  C-8).  However,  Iron  meteorites  are  more  dense  and  tend  to 
have  higher  Impact  velocities,  and  consequently,  represent  a  significant 
portion  of  the  total  meteorites  that  can  rupture  munitions.  The  size 
distribution  of  both  Iron  and  stone  meteorites  striking  the  earth  sur¬ 
face  was  estimated  from  the  data  presented  In  Refs.  C-7  and  C-8. 

The  size  of  the  meteorite  required  to  penetrate  a  munition  or 
munition  and  structure  was  computed  using  the  equations  presented  In 
Ref.  C-2.  The  Impact  velocity  was  computed  based  on  the  data  presented 


In  Ref.  C-8,  which  gives  Impact  velocities  for  a  series  of  large  meteor¬ 
ites.  These  data  were  plotted  and  extrapolated  to  estimate  the  veloci¬ 
ties  for  the  smaller  meteorites.  For  the  smallest  stone  meteorites,  the 
extrapolation  yields  Intact  velocities  which  were  less  than  their  ter¬ 
minal  velocities.  In  these  cases  the  terminal  velocities  are  used. 


C.1.6.  AIRCRAFT  CRASH 


The  probabilities  used  In  the  analysis  of  crashes  Involving  air¬ 
craft  takeoffs  and  landings  were  obtained  by  modifying  Table  C-1,  which 
was  taken  from  Ref.  C-9.  The  following  modifications  were  made  to  this 
tablet 

1.  U.S.  air  carrier  (commercial)  crash  probabilities  between  5 
and  8  miles  from  the  end  of  the  runway  were  Increased  from  0.0 
to  0.14  X  10~^  which  Is  equal  to  the  probability  for  crashes 
between  8  and  9  miles  from  the  end  of  the  runiray. 

2.  The  probabilities  for  USN/USMC  were  averaged  with  the  proba¬ 
bilities  for  USAF  to  obtain  probabilities  for  military  air¬ 
craft  In  general. 

3.  The  probabilities  for  crashes  of  military  aircraft  at  dis¬ 
tances  which  are  5  to  10  miles  from  the  runway  were  assumed  to 
be  the  same  as  for  U.S.  commercial  air  carriers. 

4.  The  general  aviation  probabilities  for  crashes  which  are  5  to 
10  miles  from  the  end  of  the  runway  are  assumed  to  be  five 
times  greater  than  U.S.  air  carrier  probabilities. 

5.  Helicopter  crash  probabilities  were  assumed  to  be  twice  the 
probabilities  for  general  aviation. 

Tables  C-2  through  C-17  summarize  the  Input  data  that  were  used  to 
calculate  the  annual  probabilities  of  both  small  and  large  aircraft 
crashes  at  each  of  the  eight  sites.  The  effective  areas  of  the  crash 
sites  are  summarized  In  Table  C-18. 
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TABLE  C-1 

AIRCRAFT  CRASH  PROBABILITIES  NEAR  AIRPORTS (a) 


Distance  From 
End  of  Runway 


Probability  (x  10®  of  a  Fatal  Crash  oer  Square 
Mile  per  Aircarft  Movement (a) 
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TABLE  C-2 

CRASH  OF  A  LARGE  AIRPLANE  AT  APG 


TABLE  C-3 

CRASH  OF  A  SMALL  AIRPLANE  AT  APG 


ROUTE  COMMERCIAL  MILITARY  GENERAL  AVIATION  ALL 
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TABLE  C-5 

CRASH  OF  A  SMALL  AIRPLANE  AT  ANAD 


TABLE  C-6 

CRASH  OF  A  LARGE  AIRPLANE  AT  LEAD 
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CRASH  OF  A  SMALL  AIRPLANE  AT  LBAD 
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CRASH  OF  A  LARGE  AIRPLANE  AT  NAAP 
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TABLE  C-11 

CRASH  OF  A  SMALL  AIRPLANE  AT  PBA 
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TABLE  C-14 

CRASH  OF  A  LARGE  AIRPLANE  AT  TEAD 


irrr: 


Q 

a.  • 

M 

>  • 

> 

os  « 

oc 

<  1 

<  C4 

HU  • 

H  U 

M  9 

M 

•J 

u 

M  C« 

a 

a 

V) 

CM 

i/) 

> 

H 

< 

♦ 

oe 

z  • 

o 

z 

a: 

CD 

0^ 

• 

cc 

< 

M 

<< 

(.  U  L.  i. 

•  #  •  # 

•  a  a 

^  X  « 

C  •  M  « 

•  •  •  « 

&  U  1.  c 
u  o  u 

fl 

V  «  •  • 

X 

•-  o  o  o 

^ 

^ 


c  X  X 

•  •  •  • 

X  X  X  X 

C  o  o  o 

3  t.  U  W 
ZO-OLft. 

H  H  H  tt 
p-*C4 

Z<-^UQ. 


sM 


TABLE  C-15 

CRASH  OF  A  SMALL  AIRPLANE  AT  TEAD 


CRASH  OF  A  LARGE  AIRPLANE  AT  UMDA 
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TABLE  C-18 

EFFECTIVE  AREAS  OF  CRASH  SITES(a) 


Storage  Facility 

Large  Aircraft 
Direct  Crash 

Large  Aircraft 
Adjacent  Crash 

Small  Aircraft 
Direct  Crash 

80-ft  igloo 

7.6E-5 

A.8E-5 

O.OE+0 

60-ft  igloo 

5.7E-5 

3.7E-5 

O.OE+0 

AO-ft  igloo 

3.8DE-5 

2.AE-5 

O.OE+O 

89-ft  magazine 

8.2E-5 

A.6E-5 

O.OE+0 

Warehouse  at  TEAD 

2.AE-3 

2.AE-3 

3.0E-3 

Warehouse  at  UMDA 

1.6E-3 

1.8E-3 

2.1E-3 

Warehouse  at  NAAP 

7.9E-A 

1.7E-3 

1.3E-3 

Open  storage  at  APG 

A.6E-3 

4.9E-3 

5.7E-3 

Open  storage  at  PBA 

l.lE-2 

6.6E-3 

1.3E-2 

Open  storage  at  TEAD 

2.2E-2 

1.2B-2 

2.5E-2 

Train  (50  cars) 

l.lE-2 

1.6E-2 

5.AE-3 

ECR 

5.AE-5 

— 

— 

UFA 

2.AE-A 

— 

1.6E-A 

TOX 

A.lE-5 

-- 

-- 

Truck 

3.6E-A 

-- 

9.0E-5 

Outside  agent  piping 
at  TEAD 

1.8E-3 

— 

5.9E-A 

(^)Units  of  area  is  square  miles. 
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APPENDIX  D 
SITE  INFORMATION 


D.l.  SITE  INFORMATION 


This  appendix  discusses  the  location  and  characteristics  of  the 
eight  CONUS  sites  where  chemical  munitions  are  stored  and  provides  a 
brief  description  of  the  storage  areas.  Figure  D-1  shows  the  general 
location  of  the  eight  sites.  The  site  characteristics  discussed 
included  recorded  earthquake  activity  and  aircraft  patterns  in  the 
vicinity. 

D.1.1.  ABERDEEN  PROVING  GROUND 

As  shown  in  Figs.  D-2  and  D-3,  the  Aberdeen  Proving  Ground  (APG)  is 
located  in  Harford  County,  Maryland  near  the  head  of  the  Chesapeake  Bay. 

APG  is  a  Test  and  Evaluation  Command  (TECOM)  Installation  within 
U.S.  Army  Materiel  Command  (AMC).  The  main  activities/mission  of  APG 
include  testing  and  evaluating  vehicles,  munitions,  and  other  combat 
hardware.  A  major  tenant  activity,  the  Chemical  Research,  Development, 
and  Engineering  Center  (CRDEC),  is  located  at  APG. 

APG  is  comprised  of  two  general  areas,  the  Aberdeen  Area  and 
Edgewood  Area.  The  Edgewood  Area  is  situated  adjacent  to  the  town  of 
Edgewood  in  the  southwestern  part  of  Harford  County.  There  have 
occurred  in  the  vicinity  of  the  APG  site  48  recorded  earthquakes  of 
Modified  Mercalli  Intensity  (MMI)  levels  from  I  to  VII,  as  summarized  in 
Table  D-1. 

The  chemical  storage  area  at  APG  is  located  in  the  northeast  corner 
of  the  Edgewood  Area.  The  Chemical  Agent  Storage  Yard  (CASY)  is  an  open 
area  encompassing  approximately  5  acres  and  is  situated  along  the  Bush 


River.  The  storage  yard  consists  of  a  central  aisleway  of  finished  con¬ 
crete  and  the  ton  containers  are  secured  over  a  gravel  surface.  There 
are  two  buildings  In  the  CASY  that  are  used  to  store  equipment.  Only 
mustard-filled  ton  containers  are  stored  at  APG  and  they  are  stored 
outdoors  In  accordance  with  AMC  regulations. 

The  airspace  above  the  Edgewood  area  of  APG  is  continuously 
restricted  (Restriction  No.  R-4001A).  Permission  to  fly  at  altitudes 
above  10,000  ft  from  midnight  to  7:00  AM  may  be  requested  2A  hr  in 
advance.  The  Weide  Army  Air  Field  (AAF)  is  located  within  a  mile  of  the 
storage  area.  It  has  a  A600-ft  runway  which  Is  used  by  a  general  avia¬ 
tion  flying  club  and  an  Air  National  Guard  helicopter  unit  located  at 
Weide  AAF.  The  Army  estimates  that  there  are  approximately  2600  general 
aviation  operations  ( takeoffs/ landings ) ,  7200  helicopter  operations,  and 
800  small  fixed-wing  military  operations  per  year  at  Weide.  There  are 
no  large  aircraft  operations. 

Phillips  AAF  is  located  approximately  8  miles  to  the  northeast.  It 
has  three  runways.  The  longest  is  8000  ft.  The  Army  indicates  that  the 
edges  of  the  approach  and  holding  patterns  for  Phillips  arc  more  than 
2  miles  north  of  the  storage  area.  Therefore,  they  are  not  considered  a 
threat  to  the  storage  area  per  the  guideline  of  Ref.  D-3. 

There  are  three  other  airports  located  in  the  area.  Baltimore  Air¬ 
park  is  approximately  8  miles  to  the  west  and  has  one  2200-ft  runway. 
Martin  State  Airport  is  located  8  miles  to  the  southeast.  It  has  three 
runways.  The  longest  is  7000  ft.  The  largest  airport  in  the  area  is 
Baltimore  Washington  International  Airport  which  is  26  miles  southwest 
of  Aberdeen.  Its  longest  runway  is  9500  ft.  There  are  two  low  altitude 
federal  airways  (V378  and  VA99)  that  pass  approximately  8  miles  from  the 
storage  area.  The  closest  high  altitude  jet  routes  (J42-8  and  J40)  are 
approximately  14  miles  from  the  storage  area.  These  airports  and  air¬ 
ways  are  not  expected  to  present  a  significant  threat  to  the  storage 


D.1.2.  ANNISTON  ARMY  DEPOT 


As  shown  in  Figs.  D-4  and  D-5,  the  Anniston  Army  Depot  (ANAD)  is 
located  within  Calhoun  County  in  northeast  Alabama  adjacent  to  Fort 
McClellan,  another  active  U.S.  Army  installation.  ANAD  is  a  major  sup¬ 
ply,  stock  distribution,  and  storage  depot  for  general  and  strategic 
material,  equipment,  and  supplies,  including  ammunition.  Its  functions 
also  Include  maintenance  and  disposal  activities  associated  with  ammuni¬ 
tion  supply  and  storage,  such  as  ammunition  preservation,  demilitariza¬ 
tion,  surveillance  and  training. 


The  chemical  storage  area  at  ANAD  is  located  along  the  north¬ 
eastern  edge  of  the  installation.  The  chemical  storage  area  is  divided 
into  two  adjacent  areas,  G-block  and  C-block.  The  ANAD  chemical  muni¬ 
tion  stockpile  consists  of  all  munition  types  except  bombs  and  spray 
tanks.  Munitions  are  stored  in  40-ft,  60-ft,  and  80-ft  igloos.  All 
40-ft  and  60-ft  Igloos  are  equipped  with  a  single  door,  while  all  80-ft 
igloos  are  equipped  with  a  double  door.  The  Igloos  are  well  maintained 
with  no  evidence  of  chronic  structural  problems.  All  Igloos  were 
re-waterproofed  in  1984.  The  re-waterproofing  involved  removing  the 
earthen  covering  over  the  igloo  and  sealing  the  concrete  surface  with 
tar.  The  earthen  cover  was  then  replaced  to  specifications. 


The  stockpile  of  chemical  munitions  stored  at  ANAD  includes  105-mm 
cartridges,  4.2-in.  mortars,  155-mm  and  8-in.  projectiles,  115-mm  rock¬ 
ets,  land  mines,  and  ton  containers.  Documentation  indicates  that  all 
of  the  105-mm  projectiles  are  stored  in  the  cartridge  configuration, 
packaged  two  cartridges  per  box.  All  munitions  are  stored  in  their 
standard  configurations  in  accordance  with  AMC  regulations. 


As  shown  in  Table  D-2,  five  earthquakes  of  MMI  levels  V  to  VII  have 
occurred  in  the  vicinity  of  the  ANAD  site  in  this  century. 
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TABLE  D-2 

EARTHQUAKES  IN  THE  VICINITY  OF  THE  ANAD  SITE(») 
(Chronological  Listing) 


Year 

Month 

Day 

Location 

Eplcentral  Intensity 
(MMI) 

1916 

10 

18 

Irondale,  AL 

33. 5N,  86. 2W 

VII 

1927 

6 

16 

Scottsboro,  AL 

34. 7N,  86. OW 

V 

1931 

5 

5 

Cullman,  AL 

33. 7N,  86. 6W 

V  to  VI 

1939 

5 

4 

Anniston,  AL 

33. 7N,  85. 8W 

V 

1975 

8 

28 

Northern,  AL 

33. 8N,  86. 6W 

VI 

(«) Earthquakes  within  a  50-  to  60-mile  radius  of  the  Anniston  site, 
abstracted  from  Table  2.3-2,  Clinch  River  Breeder  Reactor  Plant 
Preliminary  Safety  Analysis  Report.  Source:  Ref.  D-1. 


The  airspace  above  the  chemical  munition  storage  area  at  the  ANAD 
Is  unrestricted.  The  airspace  Just  north  and  northeast  of  the  chemical 
storage  area  Is  restricted  continuously  to  24,000  ft  (Restriction  number 
R-2102).  The  area  Just  west  of  the  chemical  munition  storage  area  Is 
restricted  up  to  a  5000-ft  level  from  7:00  AM  to  6:00  PM  Monday  through 
Friday  (Restriction  number  R-2101). 

The  closest  major  airfields  are  Anniston  and  Talladega,  both  of 
vdilch  are  approximately  8  miles  from  the  chemical  munition  storage  area. 
Anniston  has  a  7000- ft  runway  and  can  accept  aircraft  as  large  as  a 
Lockheed  C-141.  Air  traffic  flying  In  and  out  of  Anniston  must  stay  to 
the  south  of  the  depot  (Ref.  D-1).  Talladega  has  a  6000-ft  runxoay.  It 
has  handled  Lockheed  C-130s  but  cannot  accept  C-141s.  Air  traffic  com¬ 
ing  out  of  Talladega  must  stay  west  of  the  depot  (Ref.  D-1).  Conse¬ 
quently,  the  edge  of  the  flight  path  In  and  out  of  Anniston  and  out  of 
Talladega  Is  at  least  2  miles  from  the  storage  area. 

To  the  east  and  north  of  the  city  of  Anniston,  there  are  two  small 
airports  and  a  heliport,  the  closest  of  which  Is  8  miles  from  the  stor¬ 
age  area.  Air  traffic  from  these  airports  Is  not  a  significant  threat 
to  the  storage  area  since  there  Is  3  miles  of  restricted  airspace 
between  these  airports  and  the  storage  area. 

There  Is  one  low  altitude  federal  airway  (VIS)  which  passes  6  miles 
south  of  the  storage  area  and  one  high  altitude  Jet  route  (J14-52)  which 
passes  directly  above  the  storage  area.  The  high  altitude  Jet  route 
Is  the  preferred  Jet  route  for  air  traffic  between  Atlanta  and  Denver 
(Ref.  D-2).  Military  training  route  IR69  passes  over  the  storage  area 
and  then  returns  three  miles  south  of  the  storage  area. 


D.1.3.  LEXINGTON-BLUE  GRASS  ARMY  DEPOT 


As  shown  In  Figs.  D-6  and  D-7,  the  Lexlngton-Blue  Grass  Army  Depot 
(LBAD)  Is  located  In  Madison  County,  south  of  Richmond,  Kentucky.  The 
primary  mission  of  the  depot  Is  to  operate  a  general  supply  and  ammuni¬ 
tion  depot  activity  providing  for  the  receipt,  storage.  Issue,  mainte¬ 
nance,  demilitarization,  and  disposal  of  assigned  commodities. 

The  chemical  munition  storage  area  at  LBAD  Is  located  In  the  north 
central  half  of  the  Blue  Grass  facility.  The  chemical  munition  stock¬ 
pile  at  LBAD  consists  of  8-ln.  projectiles,  155-mm  projectiles,  and 
M55  rockets.  These  munitions  are  stored  In  89-ft  oval-arch  Igloos. 
Seventy-five  percent  of  the  Igloos  were  waterproofed  In  1982.  The  pro¬ 
cedure  Involved  removing  the  earth  covering  the  Igloo  to  apply  a  layer 
of  tar,  and  then  replacing  the  earthen  cover. 

j  Table  D-3  summarizes  earthquake  activity  In  the  vicinity  of  the 

LBAD  site. 

LBAD  airspace  Is  not  restricted.  There  are  three  small  airfields 
In  the  vicinity  of  the  depot:  Madison  County  Airport,  Berea  Richmond 
Airfield,  and  Galla  Airfield.  Madison  County  Airport  Is  approximately 
9  miles  from  the  storage  area.  At  the  Madison  County  Airport,  there  Is 
a  civilian  flight  school  which  operates  light  aircraft,  ranging  from 
single  engine  light  planes  up  to  twin  engine  aircraft.  The  flight 
school  uses  two  training  areas  near  the  depot,  one  to  the  north  and  the 
other  to  the  east.  The  Madison  County  airport  has  a  4000-ft  runway. 

The  Berea  Richmond  Airfield  is  approximately  6  miles  from  the  storage 
area  and  can  support  only  light  aircraft  on  Its  2400-ft  grass  strip  run¬ 
way.  Galla  Is  a  small,  private  airfield  12  miles  east  of  the  storage 
area.  The  air  traffic  from  these  airports  over  the  storage  area  is  not 
expected  to  be  a  significant  hazard. 
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TABLE  D-3 

EARTHQUAKES  IN  THE  VICINITY  OF  THE  LBAD  SITE (a) 
(Chronological  Listing) 


Year 

Month 

Day 

Location 

Eplcentral  Intensity 
(MMI) 

1779 

1 

1 

Kentucky 

38. ON,  84. OW 

Unknoxm 

1834 

11 

20 

Northern  KY 

37. ON,  86. OW 

V 

1933 

5 

28 

Maysville,  KY 

38. 7N,  83. 7W 

V 

1954 

1 

1 

Mlddlesboro,  KY 

36. 6N,  83. 7W 

VI 

1968 

12 

11 

Louisville,  KY 

38. ON,  85. 5W 

V 

1974 

6 

4 

Kentucky 

38. 6N,  84.77W 

V  (est) 

1976 

1 

19 

Kentucky 

36.88N,  83.82W 

VI 

1979 

11 

9 

NE  Kentucky 
38.42N,  82.88W 

V  (est) 

1980 

6 

27 

Kentucky 

38.17N,  83.91W 

VII 

1980 

8 

2 

Kentucky 

37.99N,  84.92W 

III 

1980 

8 

22 

Kentucky 

37.99N,  84.92W 

III 

(^^Earthquakes  within  a  50-  to  60-inile  radius  of  the  Lexington-Blue 
Grass  Site,  abstracted  from  Table  2.5-2,  Clinch  River  Breeder  Reactor 
Plant  Preliminary  Safety  Analysis  Report.  Source:  Ref.  D-1. 


There  Is  a  U.S.  Air  Force  radar  bombing /scoring  detachment  sta¬ 
tioned  at  the  LBAD  with  frequent  flights  (10  to  11  aircraft  per  day) 
of  Air  Force  B-52,  F-4,  and  F-111  aircraft  at  low  altitudes  (750  and 
3000  ft).  The  flights  are  active  from  11:30  AM  to  3:30  PM  and  from 
6:00  PM  until  midnight  every  day.  They  fly  at  750  ft  under  visual 
flight  rules  and  at  2000  to  3000  ft  under  Instrument  rules  with  a  visual 
observer.  Generally,  they  make  three  simulated  bombing  runs  per  flight 
at  distances  at  least  2  miles  away  from  the  chemical  exclusion  area. 

Per  the  guidelines  of  Ref.  D-3,  this  Is  not  expected  to  be  a  significant 
problem. 
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D.1.4.  NEWPORT  ARMY  AMMUNITION  PLANT 


The  Newport  Amy  Ammunition  Plant  (NAAP)  is  located  in  west  central 
Indiana,  west  of  Indianapolis,  as  shown  in  Figs.  D-8  and  D-9.  NAAP  is 
operated  by  Mason  &  Hangar.  The  mission  of  NAAP  is  to  (1)  manufacture 
explosive  and  chemical  materials,  (2)  fill  chemical  munitions,  and 
(3)  to  store  chemical  munitions.  Items  1  and  2  are  currently  inactive, 
while  item  3  involves  the  activities  associated  with  storage  of  VX 
chemical  agent  ton  containers. 

The  chemical  storage  area  at  NAAP  Includes  a  single  storage  ware¬ 
house  (Building  144)  that  is  used  to  house  VX  ton  containers.  The  stor¬ 
age  building  is  approximately  79  ft  wide  and  279  ft  long.  The  walls  and 
roof  of  the  building  are  of  heavy  gauge  corrugated  sheet  metal,  sup¬ 
ported  by  steel  beams. 

The  warehouse  is  in  an  exclusion  area  adjacent  to  the  former  VX 
production  facility.  The  grounds  within  the  exclusion  area  are  all  con¬ 
crete  or  macadam  covered  surfaces.  There  are  several  large  storage 
tanks  that  were  used  to  store  agent  \dilch  are  located  along  the  south¬ 
east  side  of  the  warehouse.  These  storage  tanks  are  currently  empty. 

A  409-ft  tall  flash  tower  is  located  450  ft  to  the  east  of  Building  144. 
The  flash  tower  was  utilized  during  production  of  VX  to  burn  several 
flammable  gas  by-products.  Just  outside  the  exclusion  area,  approxi¬ 
mately  560  ft  to  the  east  of  Building  144,  is  the  site  of  a  natural  gas 
metering  station.  Natural  gas  was  distributed  to  the  production  plant 
and  to  the  area  boiler  from  this  point.  Several  empty  storage  vessels 
are  located  approximately  350  ft  from  the  nearest  ton  containers  outside 
the  exclusion  area.  These  tanks  were  used  in  conjunction  with  the 
former  VX  production  facility.  These  tanks  are  to  remain  en^ty  during 
the  demilitarization  campaign. 

Table  D-4  summarizes  earthquake  activity  in  the  vicinity  of  the 
NAAP  site. 
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Fig.  D-9.  County  map  showing  the  location  of  NAAP 


The  airspace  at  NAAP  is  not  restricted.  The  only  airport  within  a 
lO-mile  radius  of  the  plant  is  a  private  airstrip  (Rowe)  with  a  2600-ft 
runway  located  8  miles  west  of  the  plant.  The  nearest  public  airport  is 
Clinton  v^ich  is  approximately  12  miles  south  of  the  plant.  Low  alti¬ 
tude  federal  airway  V171  passes  2  miles  east  of  the  storage  area  and 
airway  VA3A  passes  5  miles  north  of  the  storage  area.  High  altitude 
jet  routes  J80  and  J73  cross  over  the  storage  area. 


D.1.5.  PINE  3LUFF  ARSENAL 


As  shown  in  Figs.  D-10  and  D-11,  the  Pine  Bluff  Arsenal  (PBA)  is 
located  southeast  of  Little  Rock,  Arkansas  and  northwest  of  the  city  of 
Pine  Bluff,  Arkansas.  The  primary  missions  include  storage  of  conven¬ 
tional  and  chemical  munitions,  destruction  of  nontoxic  chemicals,  and 
production  of  smoke  munitions,  white  phosphorus  projectiles  and  other 
incendiary  devices.  Future  responsibilities  include  demilitarization 
of  the  BZ  stockpile  and  production  of  binary  chemical  munitions. 

The  chemical  storage  area  at  PBA  is  located  in  the  northwestern 
section  of  the  installation.  The  following  munitions  are  stored  at  PBA: 
4.2-in.  mortar  projectiles,  M55  rockets,  land  mines,  and  ton  containers. 
All  munitions  except  ton  containers  are  stored  in  80-ft  igloos.  Ton 
containers  containing  mustard  agent  are  stored  outdoors  in  a  fenced  area 
within  the  chemical  storage  area.  The  ton  containers  are  strapped  to 
railroad  rails  and  stacked  one  high  per  AMC  regulations. 

Table  D-5  summarizes  earthquake  activity  in  the  vicinity  of  the  PBA 

site. 

PBA  airspace  is  not  restricted.  The  closest  important  airfield, 
Grider  Field,  is  about  16  miles  southeast  of  the  chemical  munition  stor¬ 
age  area.  There  are  three  smaller  airfields  which  are  closer  (10  to 
14  miles).  Because  of  the  relatively  significant  distances  from  air¬ 
fields,  PBA  is  not  considered  to  have  a  significant  hazard  due  to 
airfield  operations. 

Grider  handles  approximately  115  aircraft  movements  per  day,  seven 
days  a  week.  About  95%  of  this  traffic  Is  corporate/civilian,  and  the 
remainder  is  military.  The  runway  at  Grider  Field  is  6,000  ft  and  can 
occasionally  accommodate  commercial  727  and  military  C-141  aircraft. 

Low  altitude  federal  airways  V74,  V305,  and  V16  pass  within  7,  10,  and 
11  miles,  respectively.  High  altitude  airway  J42  passes  over  the  site. 
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Fig.  D-10.  Arkansas  state  map  showing  the  location  of  PBA 


TABLE  D-5 

EARTHQUAKES  IN  THE  VICINITY  OF  THE  PBA  SITE(a) 
(Chronological  Listing) 


Year 

Month 

Day 

Location 

Eplcentral  Intensity 
(MMI) 

1911 

3 

31 

33. 8N, 

92. 2W 

VI 

1918 

10 

4 

34. 7N, 

92. 3W 

V 

1930 

11 

16 

34. 3N, 

92, 8W 

V 

1939 

6 

19 

34. IN, 

93. IW 

V 

1967 

6 

4 

33. 5N, 

90. 8W 

VI 

1967 

6 

29 

33. 5N, 

90. 8W 

V 

1969 

1 

1 

34. 3N, 

92. 6W 

VI 

1974 

2 

15 

33. 9N, 

93.  OW 

V 

1974 

12 

13 

34. 5N, 

91. 8W 

V 

1978 

9 

23 

33. 6N, 

91.89W 

V 

1982 

1 

21 

35. IN, 

92. 2W 

V 

1982 

1 

24 

35. 2N, 

92. 2W 

V 

1982 

2 

24 

35. IN, 

92. 2W 

V 

1982 

3 

1 

35. IN, 

92. 2W 

V 

1983 

1 

19 

35. IN, 

92. 2W 

V 

(®) Earthquakes 

within  a 

100  mile 

(160  km) 

radius  of  the  Pine  Bluff 

site  as  provided  by  the  National  Geophysical  Data  Center,  NOAA. 
Records  believed  to  be  duplicates  are  reported  only  once.  Source: 
Ref.  D-1. 


D.1.6.  PUEBLO  DEPOT  ACTIVITY 


The  Pueblo  Depot  Activity  (PUDA)  Is  under  the  command  of  the  Tooele 
Army  Depot.  As  shown  In  Figs.  D-12  and  D-13,  the  Installation  lies  east 
of  the  city  of  Pueblo,  Colorado  and  north  of  the  Arkansas  River.  The 
mission  of  PUDA  facilities  Is  to  operate  a  reserve  storage  and  mainte¬ 
nance  function  providing  for  (1)  limited  receipt,  storage,  and  Issue  of 
assigned  commodities;  (2)  depot  maintenance  of  assigned  commodities; 

(3)  limited  maintenance  of  facilities  to  prevent  deterioration  of  the 
ammunition  stockpile;  (4)  operation  of  a  calibration  service  for  an 
assigned  geographical  area;  (5)  demilitarization  and  disposal  of  deteri¬ 
orated  explosives  and  munitions;  (6)  ammunition  surveillance;  (7)  small 
arms  clipping  and  linking;  (8)  operation  of  the  Function/Trace  Test 
Range;  and  (9)  missile  maintenance/production. 

The  chemical  storage  area  at  PUDA  Is  located  In  the  northeast  cor¬ 
ner  of  the  depot  in  the  G-block  storage  area.  The  following  munitions 
are  stored  at  PUDA:  lS5-mm  projectiles,  105-mm  cartridges  and  projec¬ 
tiles,  and  4.2-ln.  mortar  projectiles.  All  munitions  are  stored  In 
80-ft  Igloos. 

Table  D-6  summarizes  earthquake  activity  in  the  vicinity  of  the 
PUDA  site. 

The  airspace  at  the  PUDA  is  not  restricted.  There  is  a  private 
airport  (Youtsey)  a  few  miles  south  of  the  depot.  The  nearest  public 
airport  is  Pueblo  Memorial  which  Is  located  6  miles  west  of  the  bound¬ 
ary  of  the  depot.  This  airport  has  four  runways,  the  longest  being 
10,500  ft.  Pueblo  Memorial  Is  used  as  a  training  airport  for  both  com¬ 
mercial  and  military  aircraft.  Low  altitude  federal  airways  VIO,  V19, 
V81,  V83,  V244,  and  V389  all  pass  within  a  few  miles  of  the  depot,  as  do 
high  altitude  jet  routes  J17  and  J28. 


TABLE  D-6 

EARTHQUAKES  IN  THE  VICINITY  OF  THE  PUDA  SITE 
(Ordered  By  Distance  From  Site) 


Year 

Month 

Day 

Location 

MMI 

Distance 
from  Site 
(km) 

1963 

11 

13 

38. 3N, 

104. 6W 

IV 

22 

1870 

12 

4 

38. 5N, 

104. OW 

VI 

37 

1955 

11 

28 

38. 2N, 

103. 7W 

IV 

58 

1925 

2 

18 

38. 2N, 

105. IW 

IV 

67 

1888 

10 

23 

38. IN, 

105. 2W 

IV 

78 

Data  provided  by  the  National  Geophysical  Data  Center,  NOAA. 


D.7.  TOOELE  ARMY  DEPOT 


The  Tooele  Army  Depot  (TEAD)  is  located  In  north  central  Utah 
southwest  of  Salt  Lake  City  as  shown  in  Figs.  D-14  and  D-15.  The  Ariny 
Depot  consists  of  two  separate  areas,  North  and  South.  The  chemical 
agent  storage  and  demilitarization  operations  are  located  in  the  South 
Area.  The  mission  of  TEAD  is  to  operate  a  supply  depot  providing  for 
receipt,  storage  issue,  maintenance  and  disposal  of  assigned  commodi¬ 
ties;  and  to  operate  other  facilities  such  as  the  Chemical  Agent 
Munitions  Disposal  System  (CAMDS). 

The  chemical  storage  area  at  TEAD  is  located  in  the  center  of  the 
south  area.  There  are  storage  magazines,  warehouse  buildings,  and  sev¬ 
eral  storage  yards  within  the  chemical  agent  exclusion  area.  The  stor¬ 
age  magazines  Include  both  89-ft  oval-arch  magazines  and  80-ft  igloo 
magazines.  M55  rockets,  155-mm  and  8-ln.  projectiles,  105-mm  cartridge 
projectiles,  4.2-in.  mortar  projectiles,  GB  and  VX  ton  containers,  M23 
land  mines,  and  weteye  bombs  are  stored  in  the  80-ft  igloos.  MC-1 
bombs,  155-mm  and  105-mm  projectiles  are  stored  in  the  89-ft  oval-arch 
magazines.  Ton  containers  containing  mustard  are  stored  outdoors.  The 
two  warehouse  buildings  currently  are  used  to  store  VX  spray  tanks 
packaged  inside  TMU-28/B  storage  and  shipping  containers. 

The  warehouse  buildings  are  flat-roofed,  single-story  structures 
approximately  188  ft  long,  179  ft  wide,  and  16  ft  high.  Details  of  con¬ 
struction  are  shown  in  Army  Corps  of  Engineers  Drawing  201-25-65.  The 
side  walls  of  the  buildings  are  single  piece  precast  concrete  panels 
6  in.  thick,  16  ft  high,  with  widths  varying  around  30  ft.  The  roof  is 
of  corrugated  sheet  metal,  supported  by  a  steel  beam  support  structure 
and  steel  box  beam  vertical  support  columns.  The  main  beams  are  W24  x 
68  steel  I-beams  with  unsupported  spans  of  about  30  ft.  Open  trusses 
are  used  to  span  between  the  main  beams. 
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Table  D-7  summarizes  earthquake  activity  In  the  vicinity  of  the 
TEAD  site. 

The  airspace  over  the  TEAD  South  Area  Is  not  restricted  but  pilots 
are  requested  (for  reasons  of  national  security)  to  avoid  flying  below 
6A00  ft  over  this  area  for  a  radius  of  3  nautical  miles  (3.5  statute 
miles) . 

Tooele  Municipal  Airport  Is  the  nearest  airport  to  the  site.  It 
Is  located  lA  miles  north  of  the  site  and  Is  not  expected  to  present  a 
significant  hazard. 

There  are  two  low  altitude  federal  airways  In  the  vicinity  of  the 
TEAD  South  Area:  V257t  three  miles  to  the  west,  and  V253,  17  miles  to 
the  northeast.  High  altitude  airways  are  not  considered  a  hazard  for 
this  site. 

There  Is  a  helipad  located  near  the  administrative  building  approx 
Imately  3  miles  from  the  chemical  munition  storage  area.  The  helipad 
Is  used  Infrequently.  The  number  of  flights  per  month  is  estimated  to 
be  15. 
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TABLE  D-7 

EARTHQUAKES  IN  THE  VICINITY  OF  THE  TEAD  SITE(*) 
(Chronological  Listing) 

Eplcentral  Intensity 


Year 

Month 

Day 

Location 

(MMI) 

1853 

12 

1 

39. 7N, 

111.8W 

V 

1876 

3 

22 

39. 5N, 

111.5W 

VI 

1880 

9 

17 

40. 8N, 

112. OW 

V 

188A 

11 

10 

40. 8N, 

111.9W 

VIII 

1894 

1 

8 

39. 7N, 

113. 4W 

V 

1894 

6 

8 

39. 9N, 

113. 4W 

V 

1894 

7 

18 

41. 2N, 

112. OU 

VII 

1899 

12 

13 

41. ON, 

112. OW 

V 

1900 

8 

1 

39. 8N, 

112. 2W 

VII 

1906 

5 

24 

41. 2N, 

112. OW 

V 

1909 

11 

17 

41. 7N, 

112. 2W 

V 

1910 

5 

22 

40. 8N, 

111.9W 

VII 

1914 

4 

8 

41. 2N, 

111.6W 

V 

1915 

7 

15 

40. 3N, 

111.7W 

VI 

1915 

7 

30 

41. 7N, 

112. IW 

V 

1915 

8 

11 

40. 5N, 

112. 7W 

V 

1915 

10 

5 

40. IN, 

114. OW 

V 

1916 

2 

5 

40. ON, 

111.7W 

V 

1920 

9 

18 

41. 5N, 

112. OW 

VI 

1920 

9 

19 

41. 5N, 

112. OW 

VI 

1920 

11 

20 

41. 5N, 

112. OW 

VI 

1934 

3 

12 

41. 5N, 

112. 5W 

VIII 

1934 

4 

14 

41. 5N, 

112. 5W 

1934 

5 

6 

41. 7N, 

113. OW 

1938 

7 

9 

40. 5N, 

111.6W 

V 

1938 

6 

30 

40. 5N, 

111.6W 

VI 

1943 

2 

22 

40. 4N, 

111.8W 

VI 

1947 

3 

7 

40. 5N, 

111.6W 

V 

1949 

3 

7 

40. 5N, 

111.6W 

V 

1950 

5 

8 

40. ON, 

111.5W 

V 

1951 

8 

12 

40. 2N, 

111.4W 

V 

1952 

9 

28 

40. 3N, 

111.5W 

V 

1953 

5 

24 

40. 5N, 

111.5W 

VI 

1955 

2 

4 

40. 5N, 

111.6W 

V 

1955 

5 

12 

40. 4N, 

111.6W 

V 

1958 

2 

13 

40. 5N, 

111.5W 

VI 

1958 

11 

28 

39. 4N, 

111.5W 

V 

1958 

12 

1 

40. 5N, 

112. 5W 

V 

1958 

12 

2 

40. 5N, 

112. 5W 

V 

1961 

4 

16 

39. IN, 

111.5W 

VI 

1962 

9 

5 

40. 7N, 

112. OW 

VI 

1963 

7 

7 

39. 6N, 

111.9W 

VI 

1963 

7 

9 

40. ON, 

111.2W 

1963 

7 

10 

39. 9N, 

111.4W 

V 

1965 

5 

11 

41. ON, 

111.5W 
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TABLE  D-7  (Continued) 


Year 

Month 

Day 

Location 

Eplcentral  Intensity 
(MMI) 

1966 

5 

23 

39. 2N, 

111.4W 

1967 

2 

16 

41. 3N, 

113. 3W 

V 

1967 

9 

24 

40. 7N, 

112. IW 

V 

1967 

12 

7 

41. 3N, 

111.7W 

V 

1968 

1 

16 

39. 3N, 

112. 2W 

V 

1968 

11 

17 

39. 5N, 

110. 9W 

V 

1969 

5 

23 

39. ON, 

111.8W 

V 

1970 

4 

14 

39. 6N, 

110. 7W 

V 

1970 

10 

25 

39. IN, 

111.3W 

V 

1972 

10 

1 

40. 5N, 

111.3W 

VI 

1972 

10 

16 

40. 4N, 

lll.OW 

V 

1973 

7 

16 

39. IN, 

111.5W 

V 

1977 

11 

28 

41. 3N, 

111.6W 

V 

1978 

2 

28 

40. 7N, 

112. 2W 

V 

1978 

3 

9 

40. 7N, 

112. OW 

VI 

1978 

3 

13 

40. 7N, 

112. OW 

V 

1980 

5 

24 

39. 9N, 

111.9W 

V 

1981 

2 

20 

40. 3N, 

111.7W 

V 

1981 

5 

14 

39. 4N, 

lll.OW 

V 

1983 

10 

8 

40. 7N, 

111.9W 

VI 

(a) Earthquakes  within  a  100-mlle  radius  of  TEAD  as  provided  by  the 
National  Data  Center,  NOAA.  Records  believed  to  be  duplicated  are 
reported  only  once.  Source:  Ref.  D-1. 
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D.1.8.  UMATILLA  DEPOT  ACTIVITY 


The  Umatilla  Depot  Activity  (UMDA)  is  under  the  command  of  TEAD. 

As  shovm  in  Figs.  D-16  and  D-17,  the  installation  is  located  in  Umatilla 
and  Marrow  Counties  in  northeastern  Oregon,  near  the  south  shore  of  the 
Columbia  River,  west  of  Hermiston,  Oregon.  UMDA’s  mission  is  to  operate 
a  reserve  storage  depot  activity  under  the  command  of  TEAD  providing 
care  and  preservation  for  and  minor  maintenance  of  assigned  commodities. 

The  storage  area  is  located  at  the  northern  edge  of  the  instal¬ 
lation.  Eighty-foot  igloo  magazines  and  warehouses  are  used  to  store 
the  chemical  munition  stockpile  of  155-mm  and  8-in.  projectiles,  M55 
rockets,  M23  land  mines,  bombs,  spray  tanks,  and  ton  containers.  Ware¬ 
houses  are  used  to  store  ton  containers  containing  mustard  agent.  The 
magazines  are  spaced  400  ft  apart. 

The  warehouses  are  butler  type  buildings  connected  by  a  roof  with  a 
steel  structure  and  aluminum  siding  (single  sheet).  The  two  buildings 
are  defined  as  transitory  structures,  approximately  154  ft  wide  (total 
for  both  buildings)  and  300  ft  long. 

Table  D-8  summarizes  earthquake  activity  in  the  vicinity  of  the 
UMDA  site. 

The  UMDA  airspace  is  not  restricted.  The  nearest  active  air¬ 
field  to  the  Umatilla  site  is  Hermiston  Municipal  Airport  approximately 
12  miles  from  the  depot.  With  one  4000-ft  runway,  its  capabilities  are 
limited  to  aircraft  up  to  the  size  of  corporate  jets.  The  Tri-Cities 
Airport  in  Pasco,  Washington,  with  a  maximum  runway  length  of  7700  ft, 
is  approximately  30  miles  from  the  depot.  In  general,  it  does  not  han¬ 
dle  military  aircraft.  There  is  also  a  paved  runway  on  the  UMDA  site 
capable  of  handling  small  aircraft  up  to  the  size  of  a  Beech  U-21  light 
utility  aircraft.  The  nearest  military  airfields  are  in  Spokane, 
Washington;  Moses  Lake,  Washington;  and  Mt.  Home,  Idaho. 
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TABLE  D-8 

EARTHQUAKES  IN  THE  VICINITY  OF  THE  UMDA  SITE(a) 
(Chronological  Listing) 


Month 


Location 


Eplcentral  Intensity 
(MMI) 


1893 

3 

5 

Umatilla,  OR 

VI 

1918 

11 

1 

46. 7N,  119. 5W 

V  to  VI 

1921 

9 

14 

Dixie,  WA 

V  to  VI 

1924 

1 

6 

Walla  Walla,  WA 

IV 

1924 

1 

6 

Milton  Weston,  OR 

V 

1924 

5 

26 

Walla  Walla,  WA 

IV 

1926 

4 

23 

Walla  Walla,  WA 

IV 

1936 

7 

15 

46. ON,  118. 5W 

VII 

1936 

7 

18 

46. ON,  118. 3W 

V 

1936 

7 

20 

Freewater,  OR 

IV 

1936 

8 

4 

45. 8N,  118. 6W 

V 

1936 

11 

17 

Walla  Walla,  WA 

III 

1937 

2 

9 

Walla  Walla,  WA 

IV 

1937 

6 

4 

Walla  Walla,  WA 

IV 

1938 

8 

11 

Milton,  OR 

IV 

1938 

10 

27 

Milton,  OR 

IV 

1944 

9 

1 

Walla  Walla,  OR 

IV 

1945 

9 

22 

Walla,  Walla,  OR 

IV 

1951 

1 

7 

McNary,  OR 

V 

1959 

1 

20 

Milton-Freewater ,  OR 

V 

1959 

11 

9 

Heppner,  OR 

IV 

1971 

10 

25 

46. 7N,  119. 5W 

IV 

Earthquakes  within  a  50-  to  60-mlle  radius  of  the  Umatilla  site, 
abstracted  from  Table  2.5-2,  UNI-M-90,  "N  Reactor  Updated  Safety 
Analysis  Report,"  United  Nuclear  Industries,  Inc.,  February  28, 
1978.  Source:  Ref.  D-1. 
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The  Medium  Attack  Tactical  Electronic  Warfare  Wing  bombing  range  Is 
located  10  miles  to  the  southwest  of  UMDA  chemical  munitions  exclusion 
area.  This  area  Is  a  restricted  airspace  (Restriction  numbers  R-5701, 
R-5704,  R-5706)  In  tdilch  the  Navy  holds  bombing  exercises.  Grumman  A-6 
aircraft,  In  groups  of  four,  fly  about  14  sorties  during  the  day  and 
ten  sorties  at  night,  five  days  a  week,  dropping  Inert  25-lb  bombs  and, 
occasionally,  500-  to  1000-lb  Inert  bombs.  Per  the  guidelines  of 
Ref.  D-8,  this  Is  not  considered  a  significant  threat.  There  are  two 
low  altitude  federal  airways  In  the  general  area  of  the  depot:  V-4  and 
V-112.  Three  high  altitude  airways  (J-16,  J-20,  and  J-54)  cross  within 
6  miles  of  the  depot  toward  Pendleton,  Oregon. 

The  Installation  provides  limited  maintenance  to  preclude 
deterioration  of  facilities  and  retains  limited  shipping  and  receiving 
capabilities. 
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ft  Hazards," 
Plan  3.5. 1.6 
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APPENDIX  F 

MUNITION  FAILURE  THRESHOLDS 


F.l.  MUNITION  FAILURE  THRESHOLDS 


The  munition  stockpile  Is  conq>rlse<l  of  11  different  munition  types. 
This  appendix  contains  a  description  of  the  physical  characteristics  of 
each  munition  type,  a  description  of  their  existing  storage  configura¬ 
tions,  and  a  description  of  the  munition  failure  thresholds  i.hat  are 
liq>ortant  for  quantifying  the  agent  release  associated  with  each 
accident  scenario.  The  failure  thresholds  discussed  herein  are  the 
thresholds  for  accidental  burster  detonation,  the  thermal  threshold  for 
hydraulic  rupture  of  the  agent  conq>artment ,  and  the  mechanical  failure 
thresholds  idilch  lead  to  failure  of  the  agent  conq>artment . 


F.1.1.  DESCRIPTION  OF  CHEMICAL  MUNITIONS 


\ 


The  chemical  stockpile  Is  presently  made  up  of  the  following 
munitions  t 


1.  8-ln.  artillery  projectiles.  The  8-ln.  projectiles  are  filled 
with  the  nerve,  agent  either  GB  or  VX.  They  are  stored 
without  fuzes,  but  they  may  be  stored  with  or  without 
bursters.  The  8-ln.  projectiles  are  stored  on  wooden  pallets 
with  six  rounds  per  pallet. 

2.  155-mm  artillery  projectiles.  The  155-mm  projectiles  may 
contain  GB,  VX,  or  mustard.  They  are  stored  without  fuzes, 
but  they  may  be  with  or  without  bursters.  The  155-mm  projec¬ 
tiles  are  stored  on  wooden  pallets  with  eight  rounds  per 
pallet. 


3.  105-mm  artillery  rounds.  The  rounds  are  filled  with  either 

mustard  or  GB.  The  rounds  may  be  stored  as  bare  projectiles 


on  wooden  pellets,  with  2A  rounds  per  pellet,  and  with  2  pal¬ 
lets  butted  together  and  secured  with  steel  banding,  or  as 
cartridges  In  fiber  tubes,  with  two  tubes  In  a  wooden  field 
box,  and  with  either  12  or  15  boxes  unitized  on  a  skid  based 
wooden  pallet.  The  cartridges  Include  burster,  fuze,  car¬ 
tridge  case  and  propellant. 

4.2-ln.  mortar  projectiles.  All  are  filled  with  mustard 
agent.  The  mortars  may  be  stored  with  burster,  fuze,  and  pro¬ 
pellant  In  fiber  tubes,  with  two  tubes  In  a  wooden  field  box, 
with  either  36  boxes  on  a  wooden  pallet,  or  24  boxes  on  a 
wooden  skid  base.  The  mortars  may  also  be  stored  without 
burster  and  fuze  In  wooden  pallets. 

M23  land  mines.  All  land  mines  are  filled  with  VX.  The  minea 
are  burstered,  and  are  packaged  three  to  a  steel  drum.  Hlne 
activators  and  fuzes  are  packaged  separately  In  the  same  drum. 
Twelve  drums  are  contained  on  a  wooden  pallet. 

MSS  rockets.  The  MSS  rockets  are  filled  with  either  GB  or  VX. 
The  rockets  are  equipped  with  fuzes  and  bursters  which  contain 
explosives.  Propellant  Is  also  built  into  the  motor  of  the 
rocket.  The  rocket  casing  Is  made  of  aluminum  which  may 
slowly  react  with  nerve  agent  to  form  hydrogen  gas.  Pressure 
buildup  In  some  of  the  rockets  has  caused  a  leakage  problem. 

The  rockets  are  Individually  packaged  in  fiberglass  shipping 
tubes  with  metal  end  caps.  Fifteen  containers  with  rockets 
are  packed  on  a  wooden  pallet. 

MC-1  750-lb  bombs  filled  with  GB.  The  MC-1  boinbs  are  stored 
without  explosive  consonants  on  wooden  pallets  with  two  bonibs 
per  pallet. 


8.  MK-94  500- lb  bombs  filled  with  GB.  The  MK-94  bombs  ere  stored 

without  explosive  con^onents  In  Individual  MK-410  storage  and 
shipping  containers. 


9.  MK-116  (Weteye)  600-lb  Navy  bombs  filled  with  GB.  These  bombs 

are  stored  without  explosive  components  In  Individual  MK-398 
storage  and  shipping  containers. 


TMU-28/B  airborne  spray  tanks  filled  with  VX.  They  were 
designed  for  releasing  chemical  agent  from  slow-traveling, 
low-flying  aircraft.  The  spray  tanks  are  stored  In  Individual 
CNU-77/E23  storage  and  shipping  containers. 


Ton  containers.  A  large  fraction  of  the  chemical  stockpile  Is 
stored  In  bulk  form  In  cylindrical  steel  containers  referred 
to  as  ton  containers.  The  ton  containers  may  contain  GB,  VX, 
or  mustard.  The  ton  containers  are  not  palletized,  but  are 
banded  together  In  clusters. 


Drawings  and  photographs  of  each  of  the  above  munitions  are  shown 
In  Figs.  F-1  through  F-35. 


During  transportation  of  the  munitions,  either  to  an  onsite  dis¬ 
posal  facility  or  an  offsite  disposal  facility,  the  munitions  are  placed 
In  a  protective  shipping  container  or  package.  The  shipping  package  has 
not  yet  been  designed,  but  criteria  for  the  structural  and  thermal 
protection  to  be  provided  during  munition  transport  are  defined  In 
Ref.  F-1. 
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Fig.  F-8.  Projectile,  155-mm,  HD,  M104 
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Fig.  F-9. 


ISS-mm  projectiles  are  stored  on  wooden  pallets  with  eight 
rounds  per  pallet 
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Fig.  F-10.  Projectile,  lOS-rnm,  GB,  M360 
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Fig.  F-11.  Projectile,  105-inm,  HD,  M60 
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Fig.  F-15.  Cartridge,  mortar,  4.2-in.,  HD,  M2/M2A1 
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Fig.  F-16.  Cartridge,  mortar,  4.2-ln.,  HD,  M2/H2AI 
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Fig.  F-17.  Cartridge,  mortar,  4.2-ln.,  HT,  M2/M2A1 
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78.0  la 
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OIAMEIEE 
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AGENT  WT. 

FUZE 
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EXPLOSIVE 
EXPLOSIVE  NT. 
PEOPELLANT 
propellant  HT. 

PEIMEE 

qo/sc6 

PACEAGING 


nSmm 

57  lb. 

GB 

10.7  lb. 

MA17 
N34»  M36 
Coap  B 
3.2  lb. 

M28 

19.3 

M62 

SA 

IS  rounda /vooden  pallet 


Stored  la  flrlag  tube  with  flaa  folded  toward  the  axis. 


EOCEET,  USm,  GB,  MSS 


Fig.  F-22.  Rocket,  115-inm,  GB,  M55 
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ACZNT 

VX 

ACRNT  WT. 

10.0  lb. 

ruzx 

M417 

BORSTZR 

M34,  N36 

XXPLOSIVS 

Coap  B 

IXFLOSIVZ  VT. 

3.2  lb. 

IROPELLANT 

N67 

IROPELLANT  VT. 

19.3  lb. 

PRIMER 

M62 

QP/SC6 

SA 

PAOCACIMO 

IS  rouad/wood*a  pallet 

Notat  Stortd  In  firing  tub*  with  flna  folded  toward  the  axis. 

ROOST,  Ufn,  VX,  MSS 


Fig.  F-23.  Rocket,  llS-mm,  VX,  M55 


M  55  ROCKET  PALLET 


UFTVIQUJQS. 
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FUZEWELL- 


nUJNQPLUQ 


BURSTER  CAVITY 


•FUZE  WELL 


ASE  \-<3e 
-ATE 


NOSE  PLUG' 


USiGlH 
DliHBZER 
TOTAL  HT. 

AGENT 
AGENT  HT. 

ruzz 

BOBSTZa 
EXPLOSIVE 
EXPLOSIVE  HT. 
PtOPELLANT 
PKOPELLANT  HT. 
PUMEE 
QD/SC6 
PAOCAGING 


SO  la. 

IS  la. 

725  lb. 

GB 

220  lb. 

]fOB« 

Noa« 

Nob* 

N/A 

Noa« 

N/A 

Noaa 

8A 

2  boab*/wood«a  pallet 


BOMB,  730  LB.,  GB,  MC-1 


Fig.  F-26.  Bomb,  750-lb,  GB,  MC-l 


Mm* 

M. 

■ 


MC-1  BOMB  PALLET 


Fig.  F-28.  Bomb,  500-lb,  GB,  MK  94-0 


kICIMO 


LENGTH 

86  In. 

DIAMETQL 

14  In. 

TOIAL  WT. 

525  lb. 

AGENT 

GB 

AGENT  WT. 

384  lb. 

FUZE 

M904E2 

BURSTER 

None 

EJPLOSIVE 

None 

EXPLOSIVE  WT. 

N/A 

PROPELLANT 

None 

PRIMER 

None 

PACKAGING 

Stored  In  a  metal  shipping 

and  storage  container 


Fig.  F-30.  MK-116  Mod  0  boob  (Weteye)  with  M990  D  fute  Installed 


F-33 


840099-47 


Spray  tanks  are  stored  Individually  in  CNU-77/E23  storage 
and  shipping  containers 


F-36 


F.1.2.  BURSTER  DETONATION  THRESHOLD 


Stlnull  uhlch  can  initiate  detonations  In  high  explosives  Include 
(Ref.  F-2): 

*  Shock  Initiation. 

*  Intact  initiation. 

*  Thermal  Initiation. 

*  Friction. 

*  Static  electric  discharge. 

High  explosives  can  always  be  detonated  by  sufficiently  strong  shock 
waves  because  that  Is  their  mode  of  Initiation  In  normal  use.  By 
design,  burster  reaction  Initiated  by  either  friction  or  static  electric 
discharge  Is  considered  Incredible.  In  addition,  secondary  high  explo¬ 
sives  are  relatively  Insensitive  to  shock  and  impact  initiation  for 
safety  In  use,  transportation,  and  storage.  Nevertheless,  accidental 
detonation  of  munitions  Is  considered  credible  when  the  munitions  are 
subjected  to  undue  force  arising  from  an  accident.  A  measure  of  the 
sensitivity  of  the  munitions  to  accidental  Impact  Is  Indicated  by  the 
Susan  test.  In  this  test,  the  Ignition  point  of  the  high  explosive  Is 
determined  as  a  function  of  Intact  velocity.  Given  the  explosive  con¬ 
finement  designed  Into  the  munition.  Ignition  can  be  Interpreted  as 
leading  to  a  violent  explosion.  According  to  Ref.  F-3,  the  threshold 
velocity  for  Ignition  is  about  180  ft/s  (123  mph)  for  COMP  B-3  and 
235  ft/s  (160  mph)  for  TNT.  COMP  B-3  and  TNT  are  major  components  of 
the  munition  bursters.  These  velocities  are  well  above  any  credible 
Impact  velocity  arising  from  the  accident  scenarios  considered  herein 
except  the  aircraft  crash.  However,  spontaneous,  or  unexplained  detona¬ 
tions  have  been  known  to  occur.  Therefore,  the  possibility  of  a  deto¬ 
nation  Is  evaluated  for  those  accidents  which  may  introduce  an  undue 
force  as  part  of  the  accident  scenario. 


F.1.3.  THERMAL  FAILURE  THRESHOLDS 


Th*  thermal  failure  threshold  is  defined  as  the  time  to  fall  the 
agent  coiig>ertinent  when  the  munition  la  enveloped  by  fire.  In  the  case 
of  burstered  munitions,  Including  those  which  are  also  packaged  with 
propellant,  the  thermal  threshold  may  be  a  violent  detonation.  For  non- 
burstered  munitions,  failure  occurs  by  rupturing  the  agent-containing 
vessel  because  of  Internal  pressure  buildup  associated  with  the  addition 
of  heat.  The  thermal  failure  thresholds  for  the  various  munition  types 
were  determined  by  analysis  (Refs.  F-A  and  F-5).  They  are  shown  In 
Table  F-1.  Two  fire  scenarios  were  considered:  (1)  direct  heating  of 
a  lounltlon  by  an  1850*F  fire  and  (2)  Indirect  heating  of  a  munition 
whereby  the  fire  heats  a  1/A-ln.  steel  plate  positioned  6  In.  from  the 
munition.  The  air  apace  between  the  plate  and  the  munition  Is  consid¬ 
ered  static  with  heat  transfer  occurring  by  conduction  and  radiation. 

As  shown  In  Table  F-1,  the  results  Indicate  that  burster  detonation 
occurs  before  hydraulic  rupture.  When  subjected  to  direct  exposure  to  a 
ll  fire,  rockets  can  detonate  In  as  little  as  A  min,  and  cartridges  and 

projectiles  In  6.5  min.  A  significant  Increase  in  exposure  time  is  gen¬ 
erally  predicted  for  an  Indirect  fire.  This  would  correspond  to  the 
aunltlons  In  an  uninsulated  steel  overpack  such  as  a  rocket  sport,  or 
the  vault  container  to  be  used  for  offsite  transportation.  The  corre¬ 
sponding  times  to  reach  detonation  tes^erature  are  10.5  min  for  rockets, 
75  min  for  cartridges,  and  89  min  for  projectiles. 

The  nonburstered  munitions  are  subject  only  to  hydraulic  rupture 
when  enveloped  by  fire.  The  predicted  exposure  time  to  reach  failure 
(Table  F-1)  Is  typically  about  30  min  for  direct  exposure  to  fire  and 
typically  more  than  2  h  for  Indirect  exposure. 


TABLE  F-1 

CALCULATED  THERMAL  FAILURE  THRESHOLDS 


Direct  Exposure 

Indirect  Exposure 

Cartridges^*) 

Burster  detonation 

6.5  min 

75  min 

Hydraulic  failure 

11  min 

>2  h 

Propellant  ignition 

6  min 

A9  min 

Projectiles (*) 

Burster  detonation 

6.5  min 

89  min 

Hydraulic  failure 

12  min 

>2  h 

Bofflb^*) 

Hydraulic  failure 

35  min 

>2  h 

Ton  containers (*) 

Hydraulic  failure 

30  min 

>1  h 

Spray  tank(*) 

Hydraulic  failure 

>2  h 

>2  h 

Mlne(«) 

Burster  detonation 

16  mint)’) 

68  min 

Rocket (c) 

Buster  detonation 

A  min 

10.5  min 

Propellant  ignition 

5  min 

13.7  min 

Hydraulic  failure 

7  min 

12  min 

(*)On«-dliDen8lonal  calculation  with  radiation  heat  transfer. 

(b)For  individual  mine  (not  in  drum),  based  on  test  data  from 
Ref.  5-11. 

(^)Multi-dlmenslonal  calculation  with  convection  and  radiation 
heat  transfer. 


F.1.4.  MECHANICAL  FAILURE  THRESHOLDS 


Limited  information  was  available  from  other  studies  to  define 
the  munition  mechanical  failure  thresholds.  H&R  Technical  Associates 
reported  both  calculated  and  test  results  relevant  to  the  MSS  rockets 
(Ref.  F-S).  In  addition,  H&R  Technical  Associates  calculated  the 
mechanical  failure  thresholds  for  other  munitions  (Ref.  F-6).  The 
results  of  the  calculated  crash.  Intact,  and  puncture  failure  thresholds 
are  shown  In  Table  F-2.  The  results  of  Impact  tests  available  at  the 
start  of  the  risk  analysis  are  summarized  In  Table  F-3.  The  results  of 
additional  Inqiact  tests  performed  In  July  1986  are  discussed  in  a  subse¬ 
quent  section. 

The  crush  threshold  Is  defined  as  the  static  load  required  to 
deform  the  munitions  beyond  their  yield  strength.  Two  crush  threshold 
values  are  presented  In  Table  F-2,  one  for  axial  load  and  another  for  a 
side  load.  The  calculation  of  the  axial,  or  end  crush  threshold  of  a 
single  bare  munition  assumes  that  the  crushing  force  is  applied  parallel 
to  the  axis  against  the  end  of  the  munition  and  that  the  force  Is 
equally  distributed  over  the  munition  cross  section.  The  weakest  por¬ 
tion  of  the  munition  cross  section  Is  assumed  to  be  the  portion  of  the 
agent  conq>artment  with  the  thinnest  wall.  The  side  crush  of  a  bare 
munition  was  calculated  based  on  the  assuinption  that  the  crushing  force 
applies  perpendicular  to  the  axis  against  the  side  of  the  munition  and 
that  the  force  Is  equally  distributed  along  the  length  of  the  munition. 
The  wall  thickness  Is  assumed  to  be  uniform  along  the  wall.  For  the 
calculation  of  the  end  and  side  crush  thresholds  of  a  packaged  munition, 
the  smallest  end  of  a  pallet  was  chosen  to  be  crushed  on  a  surface. 

This  assumes  a  perfectly  planar  fit  between  the  pallet  and  Its  crushing 
surface.  The  pallet  is  also  assumed  to  be  resting  on  a  perfectly 
Inelastic  massive  surface. 

The  liiq>act  threshold  Is  defined  as  the  velocity  of  liiq>act  against 
an  unyielding  surface  which  will  deform  the  munition  beyond  Its  failure 
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Hunlttons  Nuabcr  Coaponcnts  Test  Test  Test 

Conflgurstloas  Tested  Present  Dstes  Procedure  Results 


point.  The  end  (exlal)  and  side  intact  forces  on  single  and  palletized 
munitions  were  originally  determined  analytically  and  whenever  possible « 
supported  with  test  data.  Sufficient  drop  test  Information  was  availa¬ 
ble  on  the  MSS  rocket  pallets  (Table  F-3}  to  determine  that  single  anal¬ 
yses  were  not  adequate;  therefore,  multidimensional,  nonlinear  analyses 
were  conducted  (Ref.  F-S).  This  resulted  In  defining  the  liiq>act  failure 
threshold  as  a  AO-ft  drop  height  for  MSS  rocket  pallets  rather  than  3-ft 
as  calculated  by  single  analysis  shown  In  Table  F-2.  Therefore,  the 
calculated  lnq>act  failure  thresholds  for  the  other  munitions  were  also 
considered  to-be  overly  conservative,  and  additional  tests  were  per¬ 
formed  at  DPG  to  better  define  the  lopact  failure  threshold  for  the 
various  munitions.  These  are  discussed  In  a  subsequent  section. 


The  puncture  threshold  Is  defined  In  terms  of  a  ratio  of  velocity 
to  radius  of  curvature  of  the  puncture  object  assuming  that  the  munition 
(or  the  pallet)  Impacts  an  unyielding  slender  object.  If  there  Is  more 
than  one  protective  barrier,  (e.g.,  mines  packaged  In  drums),  the 
threshold  Is  the  velocity  required  to  puncture  all  the  barriers.  The 
puncture  failure  threshold  was  determined  by  calculating  the  force 
required  to  cause  material  failure  with  a  slender  object.  During  han¬ 
dling  operations,  munition  puncture  failures  will  most  likely  be  caused 
by  forklift  tines.  The  puncture  velocity  was  calculated  based  on  a  typ¬ 
ical  5000-lb  forklift.  The  munitions  are  assumed  to  be  In  their  stored 
or  shipped  configuration,  as  appropriate.  Wooden  and  aluminum  con¬ 
tainers  are  assumed  to  provide  no  protection  to  a  probe.  Some  material 
deformation  Is  also  assumed  and  is  consistent  with  the  assun^tlons  made 
for  crush  failure  threshold  calculations.  Based  on  the  SNL  data  base, 
the  calculated  truck  accident  puncture  velocity  assumed  a  3/A-ln.  radius 
probe,  while  the  railroad  accident  puncture  velocity  assumed  a  1.5-ln. 
radius  probe.  These  probe  sizes  are  considered  the  most  probable  for 
truck  and  rail  accidents.  In  each  case,  the  most  likely  object  capable 
of  acting  as  a  probe  was  considered  to  be  a  trailer/ railcar  coupler. 
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F.1.5.  ADDITIONAL  TEST  DATA  FOR  MECHANICAL  FAILURE  (IMPACT)  THRESHOLDS 


In  the  risk  analysis,  the  objective  is  to  determine  the  probability 
that  a  munition  will  fall  and  release  agent  to  the  environment.  Early 
Army  tests,  however,  were  designed  to  verify  that  properly  packaged 
nuitions  would  withstand  certain  guideline  loads  rather  than  to  deter¬ 
mine  the  point  at  which  a  failure  would  occur.  A  summary  of  various 
intact  tests  on  chemical  munitions  is  given  in  Table  F-3.  The  results 
in  Table  F-3  indicate  that  the  calculated  failure  thresholds  for  intact 
shown  in  Table  F-2  are  too  conservative.  The  one-dimensional  mechanical 
calculations  appear  to  be  reasonable  for  puncture  and  crush  failure,  but 
the  modeling  is  not  sufficiently  sophisticated  to  consider  the  ii)q>act 
energy  absorption  of  the  wood,  cardboard,  and  styrofoam  protective  pack¬ 
aging  or  the  load  spreading  capability  of  the  shipping  configuration. 
(Multidimensional  calculations  were  performed  only  on  the  M55  rocket.) 

To  determine  the  impact  failure  thresholds  of  munitions  more  accurately, 
tests  were  conducted  in  July  1986  on  mines,  ton  containers,  cartridges, 
and  projectiles  at  DPG.  The  test  results  are  summarized  in  Table  F-A 
and  are  discussed  below.  All  munitions  contained  the  appropriate  quan¬ 
tity  of  agent  simulant.  All  drops  were  onto  a  10-  x  10-  x  1-ft  concrete 
slab  reinforced  with  standard  bar  and  angle  strips  of  steel.  For  some 
tests,  the  pad  also  had  a  special  hard  concrete  surface. 

Two  drop  tests  were  conducted  with  30-gal  drums,  each  containing 
three  M23  mines.  The  first  drop  was  from  a  height  of  60  ft  such  that 
the  side  of  the  drum  impacted  the  cement;  substantial  leakage  of  the 
simulated  agent  resulted.  For  a  second  drop,  at  45  ft  and  in  the  side 
orientation,  no  failures  occurred.  Figure  F-36  shows  the  three  mines 
after  they  had  been  removed  from  the  drum  dropped  45  ft.  Note  that 
the  side  of  each  mine  was  deformed. 

Five  ton  containers  were  dropped  in  eight  tests.  The  first  ton 
container  was  dropped  from  three  heights,  (15,  30,  and  40  ft)  in  a 
side  orientation.  After  the  first  test,  the  ton  container  was  rotated 
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about  90  dag,  and  aftar  tha  aacond  tast,  tha  cylinder  was  rotated  about 
A5  dag.  Tha  first  two  tests  produced  flat  spots  along  the  length  of 
tha  cylinder.  On  tha  third  drop  of  the  first  container,  leakage  of  the 
agent  slnulant  was  observed  from  a  4-ln.  long  crack  on  the  Inside  of  the 
protective  cylindrical  apron  In  the  vicinity  of  the  head  weld.  Since 
the  crack  appeared  to  emanate  from  the  flat  spot  created  from  a  prior 
drop.  It  was  postulated  that  the  failure  occurred  because  of  the  multi¬ 
ple  drops  experienced  by  the  cylinder.  The  postulate  was  confirmed  by 
three  more  drops  of  three  separate  cylinders,  all  In  a  side  orientation 
from  40  ft:  no  leakage  occurred.  Figure  F-37  shows  the  flat  spot, 
about  6-ln.  wide,  created  by  a  typical  40-ft  drop  In  a  side  orientation. 
Two  additional  cylinders  were  dropped  from  40  ft,  but  at  a  45  deg  angle. 
The  protective  apron  was  bent  but  no  leakage  occurred.  Figure  F-38 
shows  the  deformed  apron. 

Two  pallets  of  4. 2- In.  mortars  were  dropped  from  60  ft,  the  highest 
drop  height  possible  with  the  crane  that  was  used.  The  orientation  of 
the  first  drop  was  such  that  the  edge  of  the  pallet,  along  the  length 
of  the  munition.  Initially  Ic^acted  the  cement.  No  deformation  of  the 
munition  Itself  occurred  and  no  leakage  was  observed,  although  most  of 
the  wooden  boxes  were  broken  open  and  some  of  the  cardboard  tubes  were 
damaged.  The  munitions  were  removed  (at  least  partially)  from  the  four 
cardboard  tubes  that  were  the  most  damaged  and  stacked  In  the  midst  of 
the  undisturbed  remnants  of  the  pallet  (Fig.  F-39).  In  a  second  test 
from  60  ft,  the  pallet  was  oriented  so  that  the  corner  (with  the  nose  of 
the  munition)  Initially  struck  the  cement.  Similar  damage  to  the  pallet 
dunnage  occurred,  but  the  munition  Itself  was  undamaged. 

Six  pallets  of  H360  lOS-mm  projectiles  were  dropped  In  five  tests, 
*11  from  60  ft:  (1)  a  single  pallet  oriented  to  strike  the  side  con¬ 
taining  the  fewest  munitions  (three);  (2)  two  pallets  banded  together 
and  oriented  to  strike  the  side  containing  the  fewest  munitions;  (3)  a 
single  pallet  oriented  so  that  the  pallet  edge  along  the  length  of  the 
oainltlon  would  Initially  Impact  the  cement;  (4)  a  single  pallet  oriented 


so  that  the  15  nose  ends  Initially  lnq>act  the  cement;  and  (5)  a  single 
pallet  oriented  so  that  the  corner  of  the  pallet  containing  the  nose  of 
a  munition  would  Initially  Intact  the  cement.  The  last  test  produced 
the  most  damage  to  the  munition,  but  no  leakage  occurred.  Figure  F-40 
shows  that  the  worst  damage  was  a  slightly  deformed  nose  end. 


Two  pallets  of  15S-mm  projectiles  were  dropped  from  60  ft.  One 
was  oriented  so  that  the  edge  of  the  pallet  along  the  munition  length 
Impacted  first  and  the  other  so  that  the  corner  of  the  pallet  with  the 
projectile  nose  Initially  In^acted.  The  munitions  generally  were  undam¬ 
aged  except  for  the  paint  and  some  bruising  of  the  brass  rotating  band. 
For  the  corner  drop,  the  nose  ring  of  the  munition  In  the  corner  was 
broken  as  shown  In  Fig.  F-41. 

F. 1.5.1.  Basis  for  Selection  of  Impact  Failure  Thresholds 


The  drop  test  data  clearly  demonstrated  that  the  calculated  failure 
thresholds  are  extremely  conservative.  The  drop  tests  were  able  to  pro¬ 
vide  a  more  realistic  estimate  of  the  Impact  failure  threshold  for  rock¬ 
ets,  mines,  and  ton  containers.  However,  the  tests  were  limited  to  a 
drop  height  of  60  ft  and  no  failures  or  severe  damage  were  observed  for 
cartridges  and  projectiles.  Thus,  the  actual  failure  thresholds  for 
these  "stronger"  munitions  could  not  be  established  directly  from  tests. 
For  these  munitions,  and  also  bombs  and  spray  tanks,  the  Impact  failure 
threshold  was  Inferred  by  scaling  analytical  results  using  scaling  fac¬ 
tors  obtained  from  test  data  on  similar  munitions. 


Rocket .  Two  rocket  pallet  drops  have  occurred  from  a  height  of 
40  ft  (Table  F-3);  neither  produced  failure,  although  In  one  case  the 
nose  of  one  rocket  was  severely  bent.  Indicating  that  the  failure 
threshold  for  the  worst  orientation  may  not  be  much  higher.  In  addi¬ 
tion,  conservative  calculations  indicated  failure  at  40  ft.  Thus,  40  ft 
was  selected  as  the  failure  threshold. 


Mine.  Two  tests  with  Individual  drums  of  mines  resulted  In  agent 
containment  failure  at  a  drop  height  of  60  ft  and  no  failure  at  45  ft 
(Table  F-4).  The  mine  body  deformation  at  the  45-ft  drop  height,  how¬ 
ever,  Indicated  that  other  drops  at  45-ft,  or  even  slightly  less,  could 
produce  failure.  Thus,  45  ft  was  selected  as  the  failure  threshold. 

Due  to  the  energy  absorption  capability  of  the  styrofoam  packaging.  It 
was  Judged  that  the  effect  of  palletising  the  drums  Is  negligible. 

Ton  Container.  A  prior  test  produced  failure  for  a  40-ft  side 
drop,  and  a  40-ft,  45-deg  drop  (Table  F-3).  The  more  recent  tests  pro¬ 
duced  no  failures  for  three  side  drops  and  two  45-deg  drops  from  40  ft, 
using  five  different  ton  containers  (Table  F-4).  Failure  did  occur  In 
one  ton  container  for  a  side  drop  from  40  ft  after  It  had  already  been 
dropped  from  15  and  30  ft.  Thus,  the  failure  threshold  was  selected 
as  40  ft.  The  analytical  estimate  was  3  ft.  A  scale  factor  of  13  Is 
obtained  between  the  analytical  estimate  and  the  test  data. 

Bomb.  In  two  prior  tests,  an  MC-1  750-lb  bomb  was  dropped 
from  a  plane  traveling  at  a  height  of  387  ft  and  a  speed  of  285  mph 
(Table  F-3).  The  bomb  Impacted  a  concrete  runway  at  an  average  terminal 
velocity  of  283  mph;  the  height  of  the  first  bounce  averaged  88  ft.  No 
leakage  of  the  agent  simulant  occurred.  The  Impact  orientation  of  the 
bomb  was  not  given  In  the  test  report;  however,  the  vertical  component 
was  estimated  as  105  mph.  The  equivalent  drop  height  corresponding  to 
105  mph  Is  368  ft.  It  was  assumed  that  the  effect  on  the  bomb  more 
closely  resembled  a  pure  axial  load  rather  than  a  pure  side  load.  The 
analytical  estimate  for  an  axial  load  was  148  ft  (Table  F-2). 

The  bomb  Is  similar  to  a  ton  container,  and  hence  the  scaling  fac¬ 
tor  of  13  obtained  for  the  ton  container  for  a  side  load  will  be  used  to 
estimate  the  failure  threshold  for  a  side  load  on  the  bomb.  The  analyt¬ 
ical  estimate  for  a  side  Impact  load  was  25  ft  (Table  F-2).  Hence,  the 
failure  threshold  for  the  bomb  can  be  estimated  to  be  325  ft  (25  x  13). 
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105-nim.  ISS-rnm,  and  8-ln.  Prolectiles.  Two  types  of  projectiles 
(105  mm  and  155  mm)  were  dropped  from  60  ft  (Table  F-5)  with  no  observed 
failures.  The  MllO,  155-mm  projectile  has  a  calculated  failure  thresh¬ 
old  of  2A  ft  (Table  F-2).  Thus,  an  apparent  scaling  factor  of  at  least 
60/2A  °  2.3  exists  between  the  calculated  and  experimental  failure 
thresholds.  Test  limitations  precluded  dropping  projectiles  from 
heights  greater  than  60  ft;  hence,  a  scaling  factor  was  used  to  get  a 
more  realistic  failure  threshold.  The  scale  factor  of  13  obtained  for 
the  ton  container  was  used  to  determine  the  failure  threshold  of  projec¬ 
tiles.  A  failure  threshold  of  312  ft  (2A  x  13)  was  obtained  for  the 
155  mm  projectiles.  The  projectile  representative  munition  Is  the  MA26, 
8-ln.  projectile  which  also  has  a  calculated  failure  threshold  of  2A-ft, 
but  no  tests  were  performed  with  8-ln.  projectiles.  Hence,  the  failure 
threshold  for  the  155  mm  was  used  as  an  approximate  failure  threshold 
(312  ft)  for  the  8-in.  projectile. 


A. 2  In.  Mortars.  Palletized  cartridges  were  calculated  to  fail  at 
a  drop  height  of  5  ft  (Table  F-2).  In  the  test,  cartridges  were  dropped 
from  a  height  of  60  ft  (Table  F-A),  the  maximum  height  permitted  by  test 
limitations.  There  were  no  deleterious  effects  on  the  munitions,  only 
the  dunnage  was  affected.  If  a  scaling  factor  of  13  Is  used,  an  esti¬ 
mated  drop  height  of  65  ft  (13  x  5)  Is  obtained.  Since  no  damage  occur¬ 
red  at  60  ft,  a  value  of  65  ft  Is  too  low.  This  Is  partly  due  to  con¬ 
servative  analytical  estimate  (5  ft)  when  energy  absorption  due  to  dun¬ 
nage  was  omitted.  The  cartridge  is  weaker  than  the  bomb  or  the  projec¬ 
tile,  but  should  have  a  failure  threshold  greater  than  60  ft.  Hence,  in 
the  absence  of  any  other  data  a  mean  value  (180  ft)  between  the  projec¬ 
tile  and  test  data  of  60  ft  will  be  used  as  an  approximate  failure 
threshold  for  the  cartridges  (312  +  60/2). 


Weteve  Bomb.  Data  reported  in  the  Weteye  Final  Environmental 
Impact  Statement  (FEIS)  indicate  that  the  bomb  In  its  shipping  container 
did  not  fall  but  was  severely  damaged  for  drop  tests  from  AO  ft  for 
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TABLE  F-5 

ESTIMATED  IMPACT  FAILURE  THRESHOLD  FOR  MUNITIONS 
IN  SHIPPING  CONFIGURATION 


Munition 

Failure  Threshold 
Drop  Height 
(ft) 

Basis 

Scaling  Factor 

Rocket 

AO 

(a),  (b) 

— 

Mine 

45 

(a) 

— 

Ton  container 

40 

(a) 

— 

Bomb 

325 

(c) 

13 

Cartridge 

180 

(a),  (d) 

-- 

Projectile 

312 

(c) 

13 

Weteye 

40 

(a) 

-- 

Spray  tank 

50 

(c) 

5 

^•^Test  data. 

Analytical  data. 

(^)Scaled  analytical  data. 

(^^Llmlted  data  available;  mean  of  test  data  and  projectile 
estimate. 
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either  side  or  end  orientation  (Table  F-3).  The  corresponding  calcu¬ 
lated  side  drop  failure  threshold  was  8  ft  (Table  F-2).  Thus,  the  test 
data  show  that  the  failure  threshold  Is  at  least  five  times  the  calcu¬ 
lated  value. 

Spray  Tank.  The  analytical  failure  estimate  for  the  spray  tank  was 
10  ft  (Table  F-2).  No  tests  were  performed  on  the  spray  tank;  however, 
the  spray  tank  In  Its  shipping  container  Is  similar  to  the  Weteye  bomb 
In  Its  shipping  container.  Thus,  the  scaling  factor  obtained  for  the 
Weteye  bomb  was  used  to  estimate  the  failure  threshold  for  the  spray 
tank.  A  failure  threshold  of  50  ft  (10  x  5)  was  obtained  for  the  spray 
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G.l.  DEMILITARIZATION  ACTIVITIES 


As  noted  In  Section  3.1,  the  steps  In  the  demilitarization  process 
were  grouped  Into  four  major  activities  for  the  risk  analysis:  storage, 
handling,  onsite  transportation  by  truck,  and  demilitarization  opera¬ 
tions.  Each  of  these  activities,  as  well  as  decommissioning.  Is  dis¬ 
cussed  In  detail  In  the  sections  which  follow. 

G.1.1.  STORAGE 

Safe  storage  of  the  chemical  munitions  Is  required  up  to  the  time 
they  are  processed  In  a  demilitarization  facility.  It  Is  assumed  that 
the  current  storage  arrangement  will  continue  until  a  process  facility 
or  facilities  are  ready  for  operation.  Large-scale  movement  of  chemical 
munitions  must  take  place  within  the  constraints  of  the  program  sched¬ 
ule,  plant  operating  schedules,  logistical  limitations  of  transport 
operations,  and  In  compliance  with  safety  and  regulatory  requirements  of 
transport . 

Storage  of  chemical  munitions  Is  governed  by  the  general  safety 
guidelines  of  AMC-R  385-100  (Ref.  G-1).  Specific  regulations  for  the 
storage  of  GB  and  VX  are  given  In  DARCOM-R  385-102  (Ref.  G-2) ,  and  In 
DARCOM-R  385-31  (Ref.  G-3)  for  mustard  types  H,  HD,  and  HT.  In  accord¬ 
ance  with  these  regulations,  it  was  assumed  that  the  munitions  arc 
stored  as  follows: 

1.  Magazines  or  structures  used  for  the  storage  of  agent-filled 
Items  are  In  specially  designated  areas.  The  structures  have 
floors  and  floor  surfacing  that  can  be  decontaminated. 
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Munitions  that  contain  explosives  are  stored  in  Igloo  maga¬ 
zines.  The  Igloos  are  spaced  according  to  hazard  class  and 
the  quantity  of  explosives  that  the  igloo  Is  permitted  to 
hold. 

Munitions  and  bulk  containers  containing  GB  or  VX,  but  con¬ 
taining  no  explosives,  are  stored  in  igloo  magazines  except  VX 
ton  containers  are  in  warehouses  at  NAAP,  and  VX  spray  tanks 
are  stored  in  warehouses  at  TEAD. 

Munitions  containing  mustard,  but  containing  no  explosives, 
are  stored  in  igloos  or  other  approved  structures.  Bulk  con¬ 
tainers  containing  mustard  are  also  stored  outdoors  at  APG, 
PBA,  and  TEAD.  Mustard-filled  bulk  containers  stored  outdoors 
are  secured  on  metal  supports  and  positioned  over  crushed 
stone,  gravel,  or  porous  earth  surfaces  to  minimize  atmospher¬ 
ic  contamination  in  the  event  of  leakage. 

Munitions  in  storage  are  packaged,  stacked,  and  arranged  in 
accordance  with  instructions  set  forth  in  Army  regulations  and 
approved  AMC  drawings  and  directives.  The  methods  for  stack¬ 
ing  provide  adequate  ventilation.  Aisles  are  maintained  so 
that  units  in  each  stack  can  be  inspected,  inventoried,  and 
removed  for  shipment  or  surveillance  tests. 

The  ends  of  ton  containers  are  kept  freshly  painted  and  rust- 
free  to  enhance  visual  detection  of  agent  leakage  at  valves 
and  plugs.  Shipping  bonnets  are  removed  from  ton  containers 
in  storage  to  facilitate  inspection  for  leakage.  If  a  leaking 
container  is  found,  the  leak  is  repaired,  or  the  contents  are 
transferred  into  a  new  container. 


7.  Work  performed  In  magazines  and  storage  areas  Is  limited  to 
the  types  permitted  In  Chapter  18  (Storage  of  Explosives  and 
Ammunition)  of  AMC-R  385-100. 

8.  Leaking  munitions  are  encapsulated  In  specially  provided 
containers  until  disposition  Is  accomplished. 

Three  types  of  storage  magazines  are  currently  In  use:  Igloo  maga¬ 
zines  (In  A0-,  60- ,  and  80-ft  lengths),  80-ft  Stradley  magazines,  and 
89-ft  oval-arch  magazines.  While  size  and  design  details  differ,  they 
are  all  earth-covered,  arched-roof  structures  designed  to  protect  their 
contents  from  the  blast  and  shrapnel  effects  of  a  potential  detonation 
of  a  neighboring  magazine.  For  this  risk  analysis,  except  as  noted  for 
specific  accident  scenarios,  the  structural  characteristics  of  all  the 
storage  magazines  are  represented  by  the  80-ft  Igloo  magazine.  General 
design  characteristics  of  the  80-ft  Igloo  magazines  are  listed  below 
(Ref.  G-A); 

1.  The  minimum  compressive  strength  of  the  concrete  used  in  igloo 
construction  is  2500  psi. 

2.  The  minimum  concrete  thickness  of  the  igloo  arch  is  6  in.  at 
the  crown  of  the  arch,  and  the  minimum  thickness  is  16  in.  at 
the  foundation  footing. 

3.  The  minimum  thickness  of  the  exposed  concrete  front  face  of 
the  Igloo  Is  18  In. 

A.  The  minimum  thickness  of  the  earth  cover  is  2A  in.  at  the 

crown  of  the  arch.  The  earth  cover  has  a  maximum  slope  of  two 
horizontal  units  to  one  vertical  unit  and  is  stabilized  by 
establishing  a  controlled  vegetation  cover  such  as  grass,  or 
by  mechanical  means  appropriate  to  the  local  soil  conditions 
and  climate. 


The  Igloo  Is  designed  to  prevent  water  Ingress.  Preventative 
measures  Include  membrane  waterproofing,  a  perforated  drain 
system  along  foundation  footings,  Interior  floor  slope  and 
gutters,  and  slope  of  the  concrete  entry  apron  away  from  the 
front  of  the  Igloo. 

Passive  ventilation  Is  provided  In  the  form  of  louvered  vents 
In  the  front  concrete  face  of  the  Igloo  and  a  single  ventila¬ 
tor  stack  penetrating  the  earthen  cover  at  the  rear  of  the 
Igloo.  The  stack  ventilator  Is  designed  to  prevent  back- 
drafts. 

Fusible  links  are  provided  In  the  vents  to  close  the  ventila¬ 
tion  path  In  the  event  of  a  fire. 

Single  or  double  doors,  ^dilch  open  outward,  are  provided  In 
the  front  face  of  the  Igloo.  Double  doors  create  an  opening 
measuring  8  by  8  ft.  A  reinforced  concrete  “King  Tut"  block 
Is  provided  in  front  of  each  door  as  a  security  device.  The 
block  weighs  approximately  5000  lb  and  rests  on  a  post  embed¬ 
ded  in  the  concrete  apron  In  front  of  each  Igloo;  a  forklift 
Is  required  to  remove  the  block  from  In  front  of  the  Igloo 
door.  In  addition,  the  doors  are  padlocked  shut  with  hlgh- 
securlty  locks. 

A  lightning  protection  system  is  provided. 

No  electric  power  system  Is  permanently  Installed  in  the 
Igloos;  however,  an  electrical  Junction  box  is  provided  on 
the  outside  front  face  of  each  igloo. 

No  fire  fighting  system  Is  Installed  In  or  near  the  igloos; 
however,  depot  fire  fighting  teams  are  located  within  a  few 
minutes  response  time  from  the  storage  locations.  In 


addition,  all  nonelectric  vehicles  are  required  to  carry  fire 
extinguishers  when  operating  in  or  near  the  ammunition  storage 
areas.  Also,  while  personnel  are  operating  in  the  igloos,  one 
or  more  decon  trucks  carrying  a  large  supply  of  water  is  kept 
on  standby  immediately  outside  the  igloo.  This  water  supply 
can  be  used  for  emergency  fire  fighting  if  required. 

11.  An  intruder  alert  system  is  installed  in  all  igloos. 

Warehouses  are  in  use  at  three  sites  to  store  bulk  containers. 

The  size  and  construction  of  the  warehouses  are  different  at  each  of 
the  three  sites.  Descriptions  of  the  warehouses  are  provided  in  the 
discussion  of  site-specific  data  in  Appendix  D. 

Any  munitions  in  open  storage  (mustard-filled  ton  containers)  are 
stored  in  configurations  specified  in  AlC  drawings,  but  are  otherwise 
unprotected  from  the  elements. 

Detailed  information  on  pallet  configurations  is  given  in  the 
Continued  Storage  Risk  Analysis  report  (Ref.  G-5). 

G. 1.1.1.  Activities  Associated  with  Storage 

The  activities  associated  with  munition  storage  consist  of  surveil¬ 
lance  and  maintenance  of  the  stored  munitions,  surveillance  and  mainte¬ 
nance  of  the  storage  facilities,  and  inventory  of  stored  munitions.  It 
is  assumed  that  all  surveillance  will  be  accomplished  in  accordance  with 
lAW  SB  7A2- 1300-94- 1  (Ref.  G-6).  Three  types  of  inspections  are 
conducted;  these  are  periodic  inspections  (PI),  safety  in  storage 
inspections  (SSI),  and  storage  monitoring  inspections  (SMI). 

Periodic  inspections  are  cyclical  inspections  of  the  munitions  for 
deterioration  or  nonstandard  conditions.  Periodic  inspections  are  con¬ 
ducted  at  2-yr  intervals  on  all  chemical  munitions,  unless  conditions 


warrant  more  frequent  Inspection.  (PI  does  not  apply  to  munitions  in 
demilitarization  accounts.) 

Safety  in  storage  inspections  are  periodic  inspections  of  unserv¬ 
iceable,  nonrepairable  munitions  and  munitions  in  demilitarization 
accounts,  conducted  to  assure  that  the  munitions  are  safe  for  continued 
storage,  handling,  and  demilitarization.  Visual  Inspections  are  supple¬ 
mented  by  propellant  stability  testing.  Lots  that  are  considered  poten¬ 
tially  hazardous  are  Inspected  no  less  frequently  than  the  Intervals 
specified  for  PI.  Lots  determined  to  be  nonhazardous  may  have  their  SSI 
intervals  extended,  but  the  extended  interval  may  not  exceed  twice  the 
PI  Interval. 

Storage  monitoring  inspections  are  performed-  on  chemical  agent 
munitions,  containers  of  bulk  chemical  agents,  and  containerized  muni¬ 
tions  specifically  to  detect  leakers  and  any  other  visual  defects.  Fre¬ 
quency  of  SMI  is  as  required  by  technical  instructions  for  the  specific 
item. 

At  a  minimum,  all  storage  facilities  (magazines,  warehouses,  etc.) 
are  Inspected  at  quarterly  intervals.  The  inspections  consist  of  both 
Internal  and  external  visual  examinations.  Other  than  appropriate  pro¬ 
tective  clothing  and  flashlights,  no  special  equipment  is  required.  No 
moving  or  restacklng  of  pallets  is  involved.  The  Inspections  address 
the  following: 

1.  Exterior 

•  Structural  integrity. 

*  Condition  of  storage  area. 

•  Vegetation  control. 

*  Clear  of  dried  debris. 

*  Firebreaks  cleared. 

•  Adequacy  of  earthen  cover. 
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•  Condition  of  doors  and  ventilators. 

•  Correct  type  of  fusible  link  on  vents. 

•  Lightning  protection  system. 

•  Condition  of  service  roads. 

2.  Interior 


Condition  of  munitions. 

Compliance  with  storage  drawings. 

Lot  segregation. 

Stability  of  pallet  stacks. 

Adequacy  of  aisles. 

Absence  of  unauthorized  materials  or  equipment. 
Containers  are  not  damaged. 

Presence  of  proper  records. 


Evidence  of  termites,  rodents,  water  leakage,  or  other 
nonstandard  conditions. 


Visits  to  each  of  the  chemical  storage  sites  by  the  members  of  the 
analysis  team  indicate  that  the  condition  of  the  storage  facilities  with 
respect  to  the  above  characteristics  has  been  excellent.  Only  minor 
repairs  for  water  leakage  on  Igloos  have  been  required. 


An  enhanced  storage  monitoring  program  Is  in  place  for  the  rockets, 
some  of  which  have  experienced  vapor  leaks.  Typically,  the  inspection 
Involves  a  three-  or  four-man  team  and  consists  of  walking  the  aisles 
between  the  stacks  of  pallets  and  making  an  Initial  visual  Inspection 
for  observable  signs  of  agent  leakage.  Lighting  for  the  storage  moni¬ 
toring  Inspection  is  provided  by  powerful  hand-held  flashlights.  If 
signs  of  leakage  are  found  at  any  time  during  the  Inspection,  masks  are 
donned  and  the  area  Is  cleared.  Following  visual  Inspection,  a  munition 
is  selected  at  random  for  air  sampling  of  the  Interior  of  the  shipping 
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and  firing  tube.  Sampling  is  accomplished  in  Level  6  or  Level  A  protec¬ 
tive  clothing  (see  Table  G-1).  The  inspection  procedure  involves  no 
moving  or  restacking  of  pallets  (unless  a  leaker  is  found).  All  equip¬ 
ment  is  located  on  a  self-contained  cart,  uhlch  is  rolled  into  the  igloo 
by  hand. 

Ton  containers  that  are  stored  in  Igloos  or  warehouse  buildings 
are  inspected  for  leakage  quarterly  (Ref.  G-6).  Ton  containers  stored 
in  the  open  are  also  requir-^d  to  be  inspected  quarterly  (Ref.  G-7).  A 
number  of  these  containers  (primarily  ton  containers  with  GB)  have 
experienced  severe  corrosion  of  the  brass  fill  and  drain  valves,  and 
some  have  experienced  corrosion  in  the  area  of  the  threaded  plugs 
installed  in  the  container  ends.  The  current  plan  is  to  replace  the 
brass  valves  with  stainless  steel  valves  on  all  GB  ton  containers.  The 
same  degree  of  corrosion  has  not  been  associated  with  agents  other  than 
GB.  The  corrective  procedure  for  containers  containing  those  agents  has 
been  to  replace  the  corroded  valves  or  plugs.  This  is  accomplished  with 
the  container  filled  with  agent.  While  implementing  these  procedures, 
Level  A  protective  clothing  is  worn  by  all  personnel  in  the  Immediate 
vicinity.  The  procedures  involve  removing  the  leaking  container  from 
its  storage  igloo  and  lifting  the  container  onto  a  special  fixture  which 
will  permit  the  container  to  be  tilted  from  a  horizontal  to  a  vertical 
orientation.  The  lifting  operation  is  accomplished  with  '  electric 
forklift,  using  an  Ml  lifting  bar  which  is  specifically  designed  to  lift 
a  ton  container  in  a  horizontal  position  by  engaging  both  ends  of  the 
container  with  self -locking  hooks.  Once  the  container  is  placed  in  the 
fixture,  it  is  tilted  to  the  vertical  orientation  with  the  valve  end 
pointing  up.  The  leaking  valves  are  removed,  the  threads  in  the  con¬ 
tainer  are  recut,  as  required,  and  a  new  valve  is  Installed  in  its 
place. 

Visual  examination  of  the  ton  containers  also  reveals  the  degree 
of  rusting  that  the  containers  are  experiencing.  Specific  criteria  for 
allowable  rusting  are  given  in  SB  7A2-1  (Ref.  G-6).  In  general,  the  ton 


container  will  be  placed  In  condition  Code  E  and  scheduled  for  derusting 
and  repainting  if  any  of  the  following  occur: 

1.  Minor  rust  on  the  ends  of  the  container  exceeds  25Z  of  the 
container  surface. 

2.  Sufficient  rust  exists  in  the  vicinity  of  the  valves  to  hinder 
the  detection  of  agent  leakage. 

3.  Rust  or  corrosion  on  the  cylindrical  surface  of  the  container 
has  progressed  to  the  point  of  a  scaly,  granular,  or  flaked 
condition,  accoiiq>anled  by  definite  pitting  or  etching  of  the 
material. 

4.  Rust  or  corrosion  has  progressed  to  the  point  \diere  the 
Identification  markings  on  the  container  are  threatened  to 
be  rendered  illegible. 


G.1.2.  ONSITE  TRANSPORTATION 


Transport  of  munitions  on  military  reservations  is,  essentially, 
the  movement  of  these  munitions  between  an  Interim  storage  area  and  the 
disposal  facility.  Generally,  this  movement  is  characterized  by  locat¬ 
ing  a  transport  vehicle  at  the  loading  apron,  loading  the  transport 
vehicle,  traveling  to  an  unloading  station,  and  unloading  the  vehicle. 

Chemical  munition  movement  will  take  place  using  either  a  flatbed 
munition  truck  or  a  munition  van.  All  munitions  will  be  configured  in 
onsite  transportation  containers  (ONCs)  or  overpacks  (spray  tanks  and 
weteye  bombs)  while  being  transported  by  truck. 

Movement  of  munitions  will  take  place  within  the  chemical  munition 
exclusion  area  on  existing  and/or  newly  constructed  roads.  Specific 
road  conditions  vary  from  site  to  site.  At  some  sites,  the  roads  are 
essentially  flat;  at  others,  the  roads  are  hilly  with  steep  grades.  The 
road  surface  itself  also  varies  in  condition  and  type.  In  addition, 
obstacles  such  as  utility  poles  are  present  at  some  of  the  reservations, 
while  others  have  none.  The  Immediate  surrounding  terrain  also  varies 
in  each  case  from  sandy  and  flat  to  firm  clay  with  ravines. 

Equipment  to  mitigate  the  effects  of  a  transport  accident  are 
present  with  the  munition  transporter.  This  equipment  Includes  fire 
fighting  and  decontamination  equipment  that  is  fully  manned  and  ready. 
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G.1.3.  HANDLING  ACTIVITIES 

The  following  paragraphs  describe  onsite  facility  handling  activ¬ 
ities  as  they  are  presently  defined  for  the  JACADS  facility.  Unless 
another  reference  Is  specifically  cited  these  descriptions  were  taken 
from  the  JACADS  final  design  description  (Ref.  G-10).  When  It  Is  appar¬ 
ent  that  differences  are  required  for  handling  activities  at  other  proc¬ 
essing  sites,  these  differences  are  described.  Although  the  risk  analy¬ 
sis  did  not  address  specific  accident  scenarios  Involving  the  handling 
of  leakers,  normal  handling  procedures  for  leaking  munitions  as 
described  In  Ref.  G-10  have  also  been  presented. 

One  condition  that  may  vary  from  site  to  site  and  possibly  from 
Igloo  to  Igloo  within  a  site  Is  the  relative  levels  of  the  pavement 
Inside  and  outside  the  entrance  to  the  Igloos.  Because  of  differences 
In  floor/ramp  level  Inside  and  outside  the  igloo,  munitions  that  are 
being  transported  from  an  igloo  arc  placed  on  a  pad  outside  the  storage 
igloo  to  be  picked  up  and  loaded  onto  the  transport  truck  by  another 
forklift.  The  forklift  used  outside  the  igloo  may  be  either  electric, 
gasoline,  or  LPG  powered. 

Standard  operating  procedures  exist  for  continuous  monitoring  and 
periodic  Inspections  to  identify  and  isolate  leakers  of  all  munition 
configurations.  When  preparing  for  munition  removal  from  an  Igloo,  it 
is  particularly  important  to  Identify  and  isolate  leaking  munitions  so 
that  they  may  be  decontaminated,  overpacked,  and  segregated  until  pro¬ 
cessed  in  a  separate  campaign.  To  do  this,  munitions  other  than  ton 
containers  and  spray  tanks  must  be  removed  from  their  pallets  and  han¬ 
dled  separately.  (Ton  containers  and  spray  tanks  are  always  handled 
singularly.)  Normally,  no  lifting  equipment,  other  than  an  electric 
forklift  truck,  is  available  for  handling  single  munitions. 

When  a  leaking  munition  is  removed  from  a  pallet,  a  nonleaking 
munition  of  the  same  configuration  and  lot  number  is  normally  inserted 
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In  place  of  the  leaker  to  keep  the  pallets  fully  populated.  In  this  way 
there  Is  only  one  broken  pallet  In  a  given  munition  lot. 


Palletized  munitions  are  taken  from  storage  and  placed  In  an  ONC 
for  transport  to  the  demilitarization  facility  by  truck.  Spray  tanks 
and  weteye  bombs  are  contained  In  overpacks  and  are  loaded  directly  onto 
the  trucks,  without  using  ONCs. 

At  the  demilitarization  facility,  munitions  arrive  In  either  ONCs 
or  overpacks,  either  from  the  MHI  or  directly  from  the  storage  Igloo. 
From  the  MHI,  munitions  will  be  delivered  by  forklift  directly  Into  the 
elevator  and  then  to  the  UPA.  Munitions  coming  directly  from  the  stor¬ 
age  Igloos  to  the  MDB  will  be  transported  by  a  flatbed  munition  truck  or 
a  munition  van.  On  arrival  at  the  MDB,  a  forklift  will  be  used  to 
unload  munitions  from  the  truck  and  place  them  In  the  elevator. 

G. 1.3.1.  Projectiles  and  Mortars 

Each  of  the  lOS-mm  M60  and  M360  cartridges  are  currently  stored  In 
a  fiber  tube  container,  with  two  fiber  tube  containers  per  wooden  box, 
and  12  or  15  boxes  per  pallet.  Each  A.2-ln.  M2/M2A1  mortar  cartridge  Is 
stored  In  a  fiber  tube  container,  with  two  fiber  tube  containers  per 
wooden  box,  and  24  wooden  boxes  per  pallet. 

For  the  purpose  of  this  study.  It  was  assumed  that  there  will  be  a 
special  area,  separate  from  the  demilitarization  facility,  where  car¬ 
tridges  will  be  unpacked,  the  propellant  and  Ignition  cartridge  removed, 
and  the  projectiles  repacked  In  a  configuration  of  24  munitions  per  pal¬ 
let.  The  mortar  propellants  which  are  removed  will  be  placed  Into  4-ln. 
diameter,  18-ln  long,  thin  metallic  pipes.  The  ends  of  these  pipes  will 
be  capped  with  plastic  lids.  These  tubes  with  propellant  and  cartridge 
cases  with  primers  will  be  fed  to  the  deactivation  furnace  system  (DFS) 
through  the  mine  and  rocket  transport  conveying  system  In  a  separate 


can^algn.  This  approach  Is  similar  to  that  for  the  JACADS  plant.  How¬ 
ever,  the  U.S.  Army  is  also  considering  other  approaches  to  be  used  at 
the  CONUS  sites  for  removal  of  propellant  from  these  cartridges. 

Projectiles  are  strapped  directly  to  wooden  storage/shipping  pal¬ 
lets.  The  pallets  contain  either  twenty-four  105-mm  projectiles,  eight 
155-mm  projectiles,  or  six  8-ln.  projectiles. 

G. 1.3.2.  Rockets 

Each  M55  rocket  Is  encased  In  a  fiberglass  shipping  and  firing  tube 
that  has  aluminum  nose  and  tall  closures.  Fifteen  rocket  tubes  are 
strapped  onto  a  wooden  storage/shipping  pallet. 

Rocket  pallets  are  placed  in  onsite  containers  (ONC)  prior  to  being 
transported  to  the  MDB.  Each  transport  truck  will  carry  up  to  three 
ONCs  with  15  rockets  per  ONC.  The  rocket  pallets  and  ONCs  are  handled 
inside  the  storage  igloos  by  electric  forklift  trucks. 

G. 1 . 3 . 3 .  Mines 

Mines  are  packed  three  to  a  drum  along  with  three  M603  fuzes  and 
three  Ml  activators.  Mine  pallets  (12  drums  per  pallet)  arc  moved  by 
forklift  to  the  ONC  for  transport  by  truck  to  the  MHI.  From  the  MHI, 
another  forklift  is  used  to  transfer  the  ONC  into  the  MDB,  and  subse¬ 
quently  to  the  UFA. 

G. 1.3.4.  Bulk  Items 

MC-1  750-lb  bombs  are  stored  two-to-a-pallet  while  the  MK-94  500-lb 
bombs  are  not  palletized.  Ton  containers  are  not  palletized  in  storage. 
They  are  moved  by  forklift  but  are  placed  onto  the  forklift  using  an  M-1 
or  similar  type  lifting  beam.  Spray  tanks  arc  stored  without  pallets  in 
customized  containers.  For  this  analysis,  it  is  assumed  that  spray 
tanks  arc  normally  handled  using  forklifts. 


G.1.4.  MUNITIONS  DEMILITARIZATION 


The  onsite  disposal  option  requires  that  each  site  have  its  own 
demilitarization  facility.  This  eliminates  the  need  for  any  offsite 
transportation  of  agent. 

The  demilitarization  facility  at  each  site  will  be  designed  only 
for  processing  munitions  stored  at  that  site.  Nevertheless,  the 
description  provided  below  is  generic  in  order  to  illustrate  all  aspects 
of  the  demilitarization  process. 

G. 1.4.1.  Baseline  Technology 

The  demilitarization  facility  evaluated  in  this  study  is  based  on 
the  JACADS  process.  All  demilitarization  will  be  performed  in  the  MDB, 
which  houses  the  UFA,  rocket  and  mine  punch-and-draln  machines,  projec¬ 
tile  mortar  disassembly  machines,  rocket  and  burster  shearing  machines, 
mine  machine  for  booster  removal,  a  bulk  drain  station  (BDS)  to  punch/ 
drain  bulk  items,  agent  transfer  equipment,  a  toxic  cubicle  (TOX)  for 
agent  storage  tanks,  and  furnaces  for  explosive  deactivation,  agent 
incineration,  metal  parts  decontamination,  and  dunnage  incineration. 

All  furnaces  will  have  afterburners  to  ensure  complete  agent  destruc¬ 
tion.  Each  furnace  has  its  own  pollution  abatement  system  (PAS). 

Revisions  to  the  JACADS  design  will  '-■e  necessary  for  site  adapta¬ 
tion  (Ref.  G-12).  Some  of  the  revisions  are  listed  below; 

1.  Equipment  weather  enclosures  will  be  added  for  all  process 
equipment  which  will  be  located  outdoors,  l.e.,  pollution 
abatement  system  (PAS),  brine  reduction  area  (BRA),  and  bulk 
chemical  storage  (BCS). 


2. 


All  fuel  burning  equipment,  ducts,  and  fans  will  be  sized  for 
altitude  and  different  fuel,  where  applicable. 


3.  Rooms  will  be  resized  to  provide  any  additional  space  neces¬ 
sary  to  accommodate  the  changes  noted  above. 

4.  The  structural  design  for  the  building  and  equipment  supports 
will  be  evaluated  and  revised.  If  required,  to  meet  higher 
seismic  loads. 

5.  Refrigerated  plant  air  dryers  will  be  changed  to  desiccant 
type  to  prevent  water  condensation  In  outdoor  piping  during 
winter  operations. 

A  simplified  schematic  diagram  of  the  process  Is  shown  In  Fig.  G-1. 
The  demilitarization  process  for  each  group  of  munitions  Is  described 
below  (Ref.  G-12). 

G. 1.4.2.  Prolectlles  and  Mortars 

These  munitions  (In  ONCs)  will  be  examined  for  leakers  In  the 
unloading  area.  Nonleaking  munitions  will  be  unpacked  and  transferred 
by  elevator  to  the  UFA  located  on  the  second  floor,  where  they  will  be 
removed  from  the  pallets  by  personnel  wearing  Level  D  protective  cloth¬ 
ing.  They  will  then  be  loaded  manually  on  an  Input  tray  conveyor,  taken 
to  the  explosive  containment  vestibule,  and  then  moved  through  airlocks 
and  blast  gates  to  the  explosive  containment  room  (ECR).  All  dunnage 
resulting  from  the  unpacking  operation  will  be  burned  In  the  dunnage 
Incinerator. 

Inside  the  ECR,  the  projectile  will  be  automatically  placed  on  the 
projectlle/mortar  disassembly  machine  (PMD)  turntable  for  removal  of 
explosive  components.  The  burster  will  then  be  conveyed  to  the  burster 
size  reduction  machine  (BSR)  and  fed  by  gravity  through  a  discharge 
chute  with  double  Isolation  valves  Into  the  deactivation  furnace  system 


,  v-^  V 


(DFS).  The  fuze  will  be  moved  by  conveyor  to  the  DFS  for  incineration. 
The  projectile  will  be  probed  to  verify  burster  removal  and  placed  on  a 
conveyor  from  the  ECR  and  leading  to  the  multipurpose  demilitarization 
machine  (MDM)  in  the  munitions  processing  bay.  A  plck-and-place  robot 
will  pick  up  a  projectile  from  the  pallet  and  place  it  on  a  rotating 
table.  Here,  the  burster  well  will  be  extracted  from  the  projectile  and 
a  tube  will  be  inserted  into  the  projectile  to  remove  the  liquid  agent 
by  suction  and  convey  it  to  a  storage  tank  in  the  toxic  cubicle.  If  the 
burster  well  is  stuck  or  welded  in  place,  a  milling  station  on  the  MDM 
rotating  table  will  cut  off  the  top  of  the  burster  well  to  allow  its 
removal. 

Agent  collected  in  the  TOX  will  be  Incinerated  in  a  liquid  inciner¬ 
ator  (LIC).  The  drained  projectiles  will  be  placed  on  a  tray  and  con¬ 
veyed  into  the  waiting  munitions  lift  car,  vdiich  descends  to  the  first 
floor  to  transfer  the  tray  to  a  charge  car  for  introduction  into  the 
metal  parts  furnace  (MPF) .  The  MPF  will  thermally  decontaminate  the 
drained  projectiles  to  a  5X  level.* 

G. 1.4.3.  Rockets 

M55  rockets  will  arrive  at  the  MDB  in  ONC  containers.  Only  ONCs 
verified  to  be  free  of  leaking  rockets  will  be  unloaded  in  the  package 
unloading  facility.  Operators  wearing  Level  D  protective  clothing  will 
manually  remove  individual  rockets,  feed  them  through  a  munition  meter¬ 
ing  system  to  the  explosive  containment  vestibule  (ECV),  then  into  the 
ECR.  The  rockets  will  be  automatically  punched  and  drained  at  the 
rocket  drain  station  (RDS)  in  the  ECR.  Agent  will  be  drained  from  the 
rocket  by  pump  suction  and  collected  in  the  TOX  for  subsequent  incinera¬ 
tion  in  the  LIC.  Once  drained  of  agent,  the  punched  rockets  will  be 


*The  5X  level  of  decontamination  indicates  that  the  material  is  free 
of  contamination  and  can  be  handled  without  restriction. 


conveyed  to  the  rocket  shear  machine  (RSM) ,  which  will  shear  the  rockets 
Into  the  required  number  of  pieces.  The  separated  sections  fall  by 
gravity  Into  the  feed  chute  leading  to  the  DFS,  which  Is  located  on  the 
first  floor  of  the  MDB.  An  Interlock  will  ensure  that  only  one  of  the 
two  blast  gates  In  the  feed  chute  Is  open  at  any  given  time. 

If  there  are  leaking  rockets  stored  In  an  ONC,  It  will  not  be 
opened  In  the  UFA,  but  will  be  conveyed  directly  to  the  ECV  tAere  opera¬ 
tors  wearing  demilitarization  protective  ensemble  (DPE)  suits  will  open 
the  ONC  and  manually  unload  each  rocket  onto  the  feed  table  feeding  the 
conveyor.  They  will  then  be  processed  In  the  same  way  as  nonleakers. 

G. 1.4.4.  Mines 

Pallets  of  nonleaking  mine  drums  will  be  removed  from  the  ONCs  In 
the  package  unloading  facility.  Mine  drums  will  be  unloaded  from  their 
pallet  In  the  UPA  and  placed,  unopened,  on  the  drum  conveyor  entering  a 
mine  glove  box  (MIG)  In  the  ECV.  An  operator  wearing  protective  cloth¬ 
ing  will  open  the  drum  In  the  glove  box  and  remove  the  mines.  The  acti¬ 
vators  and  fuzes  that  have  been  packed  In  the  drums  will  be  placed  In  a 
cardboard  container  and  conveyed  to  the  DFS  chute.  The  arming  plug  will 
also  be  removed.  A  mine  will  be  conveyed  Into  an  ECR,  where  It  will  be 
automatically  punched  and  drained  of  agent.  The  agent  will  be  drained 
from  the  mine  by  pump  suction  and  pumped  to  the  TOX  for  subsequent 
Incineration  In  the  LIC. 

While  In  the  ECR,  the  mine  will  be  placed  automatically  In  the  mine 
machine  (MIN)  to  punch  out  the  booster.  The  mine  body  and  booster  are 
dropped  Into  the  DFS. 

G. 1.4.5.  Bulk  Items 

Bombs,  ton  containers,  and  spray  tanks  In  ONCs  (or  overpacks  vdiere 
appropriate)  will  be  moved  from  the  MHI  by  forklift,  unpacked  at  the 


package  unloading  facility  vdiere  an  elevator  will  be  used  to  transfer 
the  munitions  to  the  UPA  which  is  located  on  the  second  floor  of  the 
JACADS  plant.  For  the  bulk  only  plants,  the  UPA  will  be  located  on  the 
ground  floor.  A  forklift  will  move  the  bulk  item  to  the  UPA  for  pallet 
removal  and  subsequent  transfer  to  tray  assemblies  on  the  input  convey¬ 
ors.  Spray  tanks  will  be  removed  from  their  shipping  containers  in  the 
UPA  and  transferred  to  tray  assemblies  on  the  input  conveyor.  Unpallet¬ 
ized  bulk  items,  such  as  ton  containers,  will  be  placed  directly  on  tray 
conveyors.  The  trays  will  be  conveyed  to  the  bulk  drain  station  (BDS), 
which  is  equipped  with  a  large  punch  and  an  agent  pump  and  removal  tube. 
The  punch  irf.ll  produce  a  hole  in  the  top  of  the  bulk  item,  and  the 
removal  tube  will  be  inserted  through  the  hole  to  allow  removal  of  the 
liquid  agent,  vdilch  will  be  transferred  to  the  TOX  by  agent  pipe  lines. 

The  tray  containing  the  drained  bulk  item  will  be  transported  to 
the  munitions  lift  car,  which  descends  to  the  first  floor  to  discharge 
the  tray  to  the  buffer  storage  conveyor  and  into  the  MPF.  Residual 
agent  will  be  burned  in  the  MPF. 
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G.1.5.  DECOmiSSIONING 


After  the  existing  stockpile  of  lethal  chemical  agent  and  munitions 
at  each  site  has  been  destroyed,  the  demilitarization  facility  will  be 
decommissioned.  The  activities  for  cleanup  and  closure  of  the  destruc¬ 
tion  facilities,  as  discussed  In  Chemical  Stockpile  Disposal  Plan 
(Ref.  G-11),  are  as  follows: 

1.  Decontamination  of  the  MDB  and  laboratory. 

2.  Disposal  of  all  solid  wastes  and  residues. 

3.  Certification  of  the  plant  and  site  as  nontoxic. 

The  first  step  In  the  cleanup  operation  will  be  the  removal  of  all 
equipment  not  required  for  the  decommissioning  effort  from  the  noncon- 
tamlnated  areas  of  the  facility.  The  contaminated  portions  of  the 
building  and  the  contaminated  destruction  equipment  will  be  washed  with 
an  aqueous  decontamination  solution.  When  the  washing  operations  are 
complete  and  the  level  of  decon  verified,  the  surrounding  areas  will  be 
tested  and  monitored  to  verify  that  any  vapor  concentrations  of  agent 
are  within  allowable  limits.  The  equipment  will  be  disassembled  for 
thermal  decontamination.  The  building  Itself  will  be  tested  or  moni¬ 
tored  to  verify  that  any  vapor  concentrations  are  within  allowable 
limits . 

The  furnaces  used  for  decontamination  of  the  munitions  will  be 
maintained  In  place  and  used  for  the  decontamination  of  process  equip¬ 
ment  as  long  as  possible.  Final  decontamination  of  the  remaining  fur¬ 
nace  and  supporting  equipment  could  be  accomplished  In  a  transportable 
furnace  brought  to  the  site. 

After  all  necessary  decontamination,  disassembly,  and  demolition, 
all  solid  waste  and  residue  resulting  from  the  decommissioning  will  be 
disposed  of.  Materials  that  cannot  be  certified  for  other  uses  will  be 


disposed  of  at  approved  hazardous  waste  landfill  sites.  The  decontaml 
nated  plant  and  site  will  be  monitored  and  tested  to  ensure  that  no 
residual  toxic  agent  Is  present.  After  monitoring  has  been  completed 
and  monitoring  samples  satisfactorily  analyzed,  the  plant  will  be 
certified  closed. 
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1.1.2.  HANDLING 


The  following  tables  list  the  accident  results  for  handling  of 
munitions. 
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I.l.A.  PLANT  OPERATIONS 


The  following  tables  list  the  results  for  Internal  and  external 
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ONSIU  IRAKSPOKTAnOM  -  ONSITE  TAClASt  •  QHSIU  OPTION 
(NOVERENT  FfiON  STOFAGE  TO  OERU  FAClLlTV  IN  ONSITE  PACEA6E> 
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